dogfood

SUSPICIOUS: the core QA purpose is coherent, but the skill grants a high-impact browser automation agent broad authority over arbitrary websites, including authenticated actions, while relying on a non-official forked CLI and processing untrusted web content. Main concerns are supply-chain trust in `chrome-use`, prompt-injection risk from live pages, and persistence of authenticated state rather than clear evidence of credential theft or exfiltration.