fast-browser-use

The stated browser automation purpose is coherent with most listed capabilities, but the CLI’s identity and provenance are unverifiable from the supplied material, and the skill passes a saved authenticated session to it. Treat this as high security risk pending verification of the actual CLI source and session handling; the evidence does not establish confirmed malware.

This code implements localStorage management for the active browser tab. The set, remove, and keyed get tools interpolate parameters into JavaScript while escaping quotes but not backslashes, enabling crafted parameters to inject JavaScript into the tab; this is a security warning with potential access to or modification of page data. The all-items read and clear operations are explicit features, and no exfiltration endpoint or other malware behavior appears in this fragment.

This code is an explicit browser JavaScript evaluation tool, not evidence of a standalone malicious payload. Caller-supplied JavaScript executes in the current tab and its result is returned, so use with untrusted callers could enable page-context actions or data access; this is a significant capability requiring access controls. No suspicious domains, URLs, IPs, file paths, or credential targets appear in the fragment.