ios-simulator-browser

SUSPICIOUS. The skill’s behavior fits its stated iOS simulator preview purpose and does not request disproportionate credentials or route data to odd endpoints, but it relies on auto-confirmed unpinned execution of a third-party npm CLI with a bundled helper binary from a personal-maintainer project. This looks like a coherent developer workflow skill with meaningful supply-chain risk rather than malware.