skill

SUSPICIOUS: The skill is internally coherent as a browser-automation skill and its install path appears consistent with official project docs, so it is not confirmed malicious. However, it gives an agent a broad stealth browsing surface with authenticated session handling, downloads, page JS execution, and untrusted-content ingestion, which creates meaningful security risk and indirect prompt-injection exposure.