fuse-browser-usage

SUSPICIOUS. The skill’s stated purpose broadly matches its browser-tool guidance, and there is no clear credential theft or malicious routing. However, it depends on an unexplained setup.sh for Chromium, uses a third-party browser engine, and encourages heavy interaction with untrusted web content, creating moderate supply-chain and indirect prompt-injection risk.