baoyu-danger-gemini-web

SUSPICIOUS. The skill's core behavior mostly matches its stated purpose, but it uses an unofficial reverse-engineered Gemini web flow, handles sensitive browser cookies, may reuse local Chrome debugging sessions, and allows proxy-rerouted traffic. Install trust is moderate rather than high because Bun/npx are official tools, but the auth and data-flow model is riskier than an official API integration.