tabbit-browser-devtools-skill

SUSPICIOUS: The skill's purpose and capabilities mostly align: it reads Tabbit's local DevToolsActivePort and connects only to localhost CDP. The main concern is trust expansion: it asks the agent to install and rely on a separate third-party skill/tool (agent-browser), plus mutable GitHub/registry install paths. Data flow is local and proportionate, with no obvious credential harvesting or exfiltration, so this is not malicious, but the transitive trust and supply-chain footprint make it moderately risky.