aside-jun

SUSPICIOUS: the skill is largely coherent with its stated purpose of routing authenticated Aside browser work, and most scanner hits are documentation artifacts rather than hidden execution. However, it grants a broad authenticated action surface: unattended exec runs, login automation, scheduling, file writes, and potential site mutations using a signed-in browser. No clear credential exfiltration or malicious routing is shown, so this is not confirmed malware, but the real-world action scope makes it medium risk.