browser-automate

SUSPICIOUS: the skill's browser-automation purpose matches its capabilities, and the payment-confirmation guard is a meaningful safety control. The main concern is trust in a repeatedly executed, mutable same-org setup script plus the broad power to act inside the user's real logged-in browser on arbitrary sites, including purchases.

This file is a high-risk supply-chain bootstrap wrapper: it downloads a shell script from a moving GitHub raw URL and immediately executes it with exec bash, without any cryptographic integrity/authenticity checks or immutable pinning. While the wrapper itself contains no overt malicious logic, it creates a direct path for attacker-controlled upstream changes to become code execution on the client. Prefer replacing with a pinned, verifiable artifact (commit/release) and add checksum/signature verification before execution.