windows-host-browser

SUSPICIOUS. The skill is purpose-aligned, but its footprint is inherently high-trust: it gives the agent control over the user's real signed-in browser, access to data behind live sessions, network inspection, and proxy credential handling. There is no clear evidence of malware or deceptive exfiltration, yet the scope and consequences are large enough to warrant medium risk.

No clear malware, credential theft, persistence, or destructive behavior is evident in this fragment. It is a privileged browser-control utility: its arbitrary JavaScript evaluation and access to the local CDP endpoint can enable significant browser manipulation, so use should be restricted to trusted operators. The egress command intentionally discloses the request's public IP to ip-api.com.