unbroker

SUSPICIOUS: the skill’s capabilities mostly match its privacy-removal purpose, but it has a large operational footprint: autonomous external submissions, email handling, recurring execution, shared `.env` secret intake, and optional routing of sensitive activity through Browserbase. This looks more like a high-risk automation skill than malware; the main concerns are autonomy, third-party data handling, and credential scope rather than deceptive intent.