broll-capture

SUSPICIOUS. The core capability is coherent with the stated purpose, and most data stays local, but the optional use of a likely unofficial `screenstudio-cli` introduces medium supply-chain risk. No clear credential harvesting or exfiltration is described, though capturing a real logged-in browser can expose sensitive on-screen account data if misused.