dev-browser

The skill is broadly consistent with its stated browser-automation purpose, but its footprint is high-trust: it controls a signed-in browser session, can interact with live sites, and fetches reference content from mutable raw GitHub URLs. No clear credential theft or covert exfiltration is shown, but the combination of third-party CLI dependence, persistent authenticated browser access, and external-content processing makes it a suspicious medium-risk skill rather than a benign low-risk one.