browser-debugger

SUSPICIOUS. The core browser-debugging purpose matches Chrome DevTools MCP usage, but the optional visual-analysis path expands scope by installing a third-party CLI that forwards screenshots and API keys through wrapper code and an aggregator. Nothing indicates confirmed malware, yet the install provenance mismatch for claudeup and credential/data routing through claudish/OpenRouter make the skill riskier than a normal documentation-style testing skill.