browser-cdp

SUSPICIOUS. The skill is largely aligned with its stated browser-automation purpose and uses a plausibly official npm-distributed CLI, but it is high-sensitivity by design because it extracts auth tokens/cookies from an already logged-in browser and can act inside authenticated sessions. No clear malicious exfiltration path is shown, so this is not confirmed malware; the main concerns are credential access, broad browser control, and reliance on an external CLI plus an unreviewed local setup script.