burner-agents-privacy

SUSPICIOUS. The skill’s browsing/privacy capabilities broadly match its stated purpose, but the install path is not trustworthy: publisher identity does not match the referenced source, the GitHub coordinates are stale and redirect to a personal repo, and the pip package name could not be verified. No direct credential theft or exfiltration is shown, but the supply-chain inconsistency is significant enough to treat this skill as medium-high risk.