run-agent-browser

SUSPICIOUS: the skill is purpose-aligned and uses a legitimate official CLI, so it does not look malicious. However, it gives an AI agent broad browser automation over arbitrary web content, can handle credentials and persisted sessions, and explicitly defaults to minimal restrictions, making it a high-utility but materially risky capability.