browser-extension-launch

SUSPICIOUS: The skill’s purpose and data flows are broadly coherent, but its mandatory transitive skill installations introduce meaningful supply-chain risk. The referenced dependency manifest and exact pins are unavailable, and several sources are third-party repositories. No evidence of credential harvesting, exfiltration, or deliberate malicious behavior appears in the supplied material.