competitor-analysis

SUSPICIOUS: The skill's purpose, Browserbase credential, official npm CLI install, and Browserbase data flows are broadly coherent, so this is not malware. However, it combines broad Bash approvals, high-volume untrusted web intake, and extensive autonomous subagent execution, making it a medium-high risk research skill rather than clearly benign.