windows-host-browser

SUSPICIOUS: the skill is purpose-aligned, but its footprint is very high risk. It grants an AI agent remote control over a real signed-in personal browser, access to data behind multiple live accounts, proxy credential retrieval from Heroku, and SSH-based host control. There is no clear malicious installer, but the scope and data access are disproportionate enough that misuse could expose sensitive account data or perform unintended actions.

This module is high-risk browser control code. It uses CDP to attach to a specific extension service worker (hardcoded EXTID), then executes arbitrary JavaScript via Runtime.evaluate (including an explicit user-controlled 'eval' path). It can change proxy settings and persist proxy authentication credentials into extension storage, trigger extension-driven web requests, and optionally perform an external egress/identity request (ip-api.com). While it may be used for legitimate debugging/automation, the capability set strongly matches abuse patterns and warrants careful review and containment (restrict CDP endpoint access, remove/disable eval, and block credential/proxy modification in untrusted contexts).