opencli-web-automation

SUSPICIOUS: the skill is broadly coherent for web automation, but it is high-sensitivity by design because it reuses logged-in browser sessions, can extract auth tokens from browser storage, and enables authenticated site automation on arbitrary targets. Install sources are largely legitimate and verifiable, so this is not confirmed malware; the main concerns are scope proportionality, mutable dependency execution, and credential-bearing browser session reuse.