Supply chain
mediumContextual riskmedium confidenceThe skill's Requirements section instructs the agent to globally install the npm package `@anthropic/agent-browser` with no version pin, an unpinned remote-code prerequisite install the agent may execute before the user's task.
agent-browser must be installed: `npm install -g @anthropic/agent-browser`
vector:instruction
Counter-argument considered
Strongest case against: the install is open in a Requirements section and the declared description already names agent-browser, so nothing is concealed. Strongest case for: the carve-out covers only pinned official-registry installs, this command has no version pin and the agent is told to run it globally, and no shown unit declares a mutable install step, so the supply-chain risk stands as claimed.