remote-browser

BENIGN in purpose alignment but HIGH security risk in deployment. The browser automation, cookies, screenshots, CDP access, and tunnel features are consistent with a remote-browser skill, with no clear signs of credential theft or deceptive data routing. However, the install chain appears to rely on an official but mutable installer plus an auto-downloaded helper binary with limited surfaced verification, and the skill can publicly expose local services and manipulate live websites. Treat as a legitimate but high-trust, high-impact skill rather than malware.