setup-browser-cookies
Warn
Audited by Socket on Apr 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core cookie-import behavior is legitimate for browser QA, but the skill bundles unrelated telemetry, upgrade, analytics, and contributor workflows that widen data handling beyond its stated purpose. The Bun installer is official and not a major red flag by itself; the bigger concern is reliance on opaque local gstack binaries and background telemetry with unspecified endpoints.
Confidence: 84%Severity: 58%
Audit Metadata