nature-downloader

SUSPICIOUS. The stated purpose is coherent, and the documented routes mostly use official APIs or user-authorized browser access, but the skill has a materially elevated footprint: remote browser control over authenticated sessions, automatic handling of verification challenges, local credential storage, and transitive reliance on another skill. That combination is disproportionate enough to warrant caution even without clear evidence of credential exfiltration or malware.

This module is highly consistent with abusive anti-bot/captcha bypass automation: it detects slider and reCAPTCHA challenge elements in the target DOM, executes browser-context JavaScript to trigger synthetic user actions, and uses CDP-driven mouse events to perform human-like dragging/clicking, followed by heuristic success checks and retries. While no direct data theft is visible in the provided fragment, the intended functionality undermines security controls (human verification) and is therefore a serious security risk in most deployment contexts.