read-personal-data-harvester

SUSPICIOUS: the skill’s purpose and capabilities are broadly aligned, but it is a high-privacy, high-autonomy scraper that accesses local personal data stores, reuses logged-in sessions, and includes anti-detection tactics. No clear malicious exfiltration endpoint or fake installer is present, but the scope and unattended harvesting behavior create substantial security and privacy risk.

No clear malware payload (exfiltration, command execution, or embedded secrets) is present in this fragment. The code is nevertheless security-sensitive: it explicitly implements anti-detection/fingerprinting evasion and continues automation after captcha detection, while persisting authenticated cookies and browser profile state to disk. This strongly increases the likelihood the package is intended for automated, authenticated access that may bypass platform controls, and it increases risk via local storage of sensitive session tokens. Consumers should treat it as high-risk for misuse and handle cookie/profile storage with strict protections and policy controls.

No direct evidence of classic malware (e.g., backdoor, ransomware, credential theft/exfiltration to a remote C2, or obfuscated malicious payloads) is present in this excerpt because it is not executable package code. The primary concern is operational security/privacy: it provides detailed guidance to collect highly sensitive personal reading/activity data from authenticated third-party APIs and local private application caches, while also including explicit anti-detection/stealth tactics and scrape-throughput tuning. This should be treated as high privacy/compliance risk and reviewed carefully in the context of actual implementation, consent, data handling, and whether any data is forwarded beyond the user’s control.