browser-use

SUSPICIOUS: The skill is broadly aligned with browser automation, but it has a high-impact footprint: local profile/cookie access, cloud profile sync, public session sharing, and localhost tunneling. The install provenance is mostly legitimate and same-org, so the main concern is exposure and forwarding of authenticated browser state to remote services, not outright malware.