agentcookie-install

SUSPICIOUS: the skill's behavior matches its stated purpose, but that purpose is inherently high-risk. It installs a personal-repo CLI, persists it as a daemon, and continuously replicates authenticated Chrome cookies to another machine so an agent can operate as the user. Data flows are mostly coherent and stay on the user's tailnet, so this is not confirmed malware, but the credential/session handling and autonomy implications make the overall skill high risk.

This artifact is a high-sensitivity deployment/pairing recipe that installs/configures an agent to enable live Chrome CDP behavior (`live_cdp.enabled: true`) and to start Chrome with remote debugging (`--remote-debugging-port=9223`) so it can inject/synchronize cookies/sessions between a designated source and sink. No underlying package code is provided, so malware cannot be proven from this fragment alone, but the described capabilities and automated remote control surfaces present a high security risk if the tool, pairing/authentication, or ACL boundaries are compromised or overly permissive.