scraping-specialist

No explicit malicious payload behavior (e.g., credential theft, reverse shells, direct exfiltration, dynamic code execution) is visible in the provided fragment. However, the module is clearly designed for automated scraping and intentionally weakens browser security boundaries (no-sandbox/disable-web-security/site isolation disabling) and uses stealth/bot-evasion. Additionally, it accepts arbitrary proxy configuration from CLI and routes all browsing through it. Given the snippet truncation, the highest-impact aspects—how scraped data is handled/saved and whether any additional network exfiltration occurs—cannot be verified from this fragment alone. Overall: likely an automation/scraper with meaningful security hardening concerns rather than evident malware.

SUSPICIOUS. The top-level router is mostly consistent with scraping workflows, but the inclusion of IDA Pro reverse-engineering/plugin-development sub-skills is a significant purpose mismatch that broadens the agent's capability beyond web scraping. No direct malware, credential theft, or installer abuse appears in this file, but the skill composition is internally inconsistent and raises medium security concern.