browser-act-skill-forge

SUSPICIOUS: the skill's broad web-exploration and skill-forging purpose mostly matches its capabilities, and the BrowserAct install path appears publisher-consistent, but the overall footprint is high risk. The main concerns are transitive skill installation, execution of generated artifacts, and processing arbitrary website content while writing and running automation, plus autonomous site actions beyond simple reading.

No explicit malware behavior (e.g., credential theft, persistence, destructive actions, or specific exfiltration to known malicious destinations) is shown in this fragment. However, it contains a high-risk supply-chain primitive: eval of dynamically generated JavaScript produced by Python wrapper stdout via shell command substitution. This makes the overall system sensitive to parameter injection and upstream compromise. To assess real malicious intent, the actual scripts/*.py contents and the exact generated JS payloads/targets must be reviewed end-to-end.