browse-x

SUSPICIOUS. The skill’s behavior mostly matches its read-only X browsing purpose, and there is no clear sign of malware or credential theft. The main concerns are third-party proxying of all lookups, optional bearer-token forwarding, host override via X_API_BASE, and some install/domain trust ambiguity; these make it medium risk rather than benign.