extract-axure-data

No clear malware or deliberate data-theft behavior is present. The code is a legitimate-looking Axure extraction CLI, but it executes remote JavaScript, uses a non-isolated browser configuration, supports attaching to an authenticated Chrome session, installs dependencies dynamically, and writes using insufficiently validated remote-derived page names. It should be used only with trusted URLs and trusted CDP endpoints; page names should be sanitized and remote code/browser isolation strengthened.