agent-browser

SUSPICIOUS: the core capabilities match a browser automation skill, but the footprint is high-risk and only partly constrained. Main concerns are broad real-world action capability, session persistence, arbitrary web-content handling with action/exec powers, and an installer/publisher mismatch that weakens trust even though the CLI appears to come from npm rather than an obviously malicious source.