Agent Browser - Stagehand

This skill is coherent with a browser automation tool, but there are several red flags you should consider before installing or running it: - The registry says no credentials are required, but the included docs/setup.json expect ANTHROPIC_API_KEY and optionally Browserbase API keys. Treat those credentials as sensitive — if you provide them the tool may send page content and extracted data to remote services. - The skill recommends running 'npm install' and 'npm link', which will install dependencies and create a global 'browser' command. Only run those if you trust the package source; review package.json and dependency list first. - It uses a persistent Chrome profile (.chrome-profile) and saves downloads/screenshots to local folders. That will preserve cookies, sessions, and downloaded files — avoid using it on pages with sensitive accounts unless you understand and accept that persistence. - Mode selection is automatic: if Browserbase keys are present the tool will use remote infrastructure (stealth/proxy). If you don't want remote use, do not provide Browserbase credentials and remove any existing .env keys. - The tool refers to sending page data to an external LLM (Anthropic Claude). If you will visit pages containing secrets or PII, assume that data may be transmitted to the model provider. Recommended actions: inspect the package contents (package.json, src) before running npm install; run in an isolated/sandbox environment first; only provide API keys you trust and rotate them after testing; and avoid automating authenticated flows with sensitive accounts until you verify behavior and data flows.