browser-read-bypass

SUSPICIOUS: the skill’s mechanics match its stated purpose, but that purpose is to bypass an existing browser interaction restriction by injecting Windows-level input. It does not show malware indicators like exfiltration, remote payloads, or credential theft, but it materially weakens execution safeguards and enables arbitrary browser actions.