go-rod-master

SUSPICIOUS. The core browser automation purpose matches most capabilities, but the footprint is elevated by stealth anti-bot evasion, traffic hijacking, TLS-ignore guidance, unpinned installs, automatic browser binary download, and one not-clearly-official pre-download command. This is not confirmed malware or clear credential theft, but it is a high-impact automation skill with meaningful supply-chain and misuse risk.

The provided fragment describes a high-capability browser automation module that supports both stealth/fingerprinting evasion and network hijacking with the ability to modify HTTP response bodies and block requests, plus direct CDP commands that alter browser behavior. While the excerpt does not demonstrate explicit data theft or external exfiltration, the described combination is consistent with covert scraping/content manipulation workflows and should be treated as a security-sensitive dependency. Verification should focus on the complete interception handler logic (what is matched, what is modified, and whether any data is transmitted externally) and the surrounding code that performs stealth patches.