jb-browser-testing

SUSPICIOUS: the stated purpose matches browser-testing behavior, and the Vercel fallback is broadly coherent, but the skill's primary dependency is an unverifiable private skill and the design relies on transitive trust in other skills. No direct credential harvesting or malicious data exfiltration is shown in this file, so this is not confirmed malware, but the unclear provenance of the primary tool raises meaningful supply-chain risk.