browse-geo

SUSPICIOUS. The skill’s purpose and core capabilities mostly align with GEO monitoring, and data flows go to official services rather than attacker-controlled endpoints. However, it combines Bash access with large volumes of untrusted external content and uses stealth/browser-profile techniques, creating a real indirect prompt-injection and session-sensitivity risk even without clear evidence of credential theft or malware.