agent-browser

SUSPICIOUS: the skill’s capabilities broadly match its browser-automation purpose, but its trust footprint is larger than a simple CLI guide. Main concerns are native binary download/execute during install without strong checksum/signature assurances, transitive sub-skill loading, and high-impact automation abilities such as authenticated browsing and Slack actions. No clear evidence of malicious credential harvesting or off-platform exfiltration was provided.