browser-harness

SUSPICIOUS. The skill's capabilities mostly match its browser-automation purpose, and the upstream runtime appears to be an official, verifiable project rather than an unknown payload. However, it grants high-impact access to authenticated browser sessions and optionally forwards profile/session state to a third-party cloud service, making it high-risk and requiring strict user approval and data-transfer consent.