chrome-devtools

SUSPICIOUS: the skill’s stated browser-debugging purpose aligns with its capabilities and privacy guidance, but it relies on an already-installed PRB-specific MCP wrapper whose provenance is not publicly verifiable. The main risk is supply-chain trust in that local executable plus access to a shared authenticated browser; the data flows themselves are otherwise coherent and mostly local.