setup-dev-browser

SUSPICIOUS. The core purpose is coherent, but the skill’s footprint is high-risk: it installs repo-fetched executable content from a personal GitHub branch, installs another skill transitively, stores persistent authenticated sessions for valuable accounts, and broadens agent permissions so it can act in those sessions without asking each time. Data flow stays mostly local/official, so this is not confirmed malware, but the autonomy and trust-chain risks are substantial.