agent-browser

The provided fragment contains a clear high-sensitivity capability: it automates login and then harvests authenticated browser cookies via injected JavaScript (document.cookie), parses the results, and echoes the cookies to stdout. Even without visible malware behaviors beyond browser automation, this is strongly aligned with session/credential harvesting patterns and should be treated as a significant supply-chain/security risk unless strictly confined to an isolated, controlled test environment with strict access controls and output redaction. Additional context (full login implementation, whether cookies are actually emitted, and how outputs are handled in the consuming project) would be needed to reduce uncertainty about malicious intent.