doctor points users to an unaffiliated Chrome Web Store extension for the OpenCLI browser bridge
On agent-reach 1.5.0 (macOS), agent-reach doctor --json and the installer both tell the user to install the OpenCLI browser bridge from this Chrome Web Store listing:
https://chromewebstore.google.com/detail/opencli/ildkmabpimmkaediidaifkhjpohdnifk
This appears in the message field for twitter, reddit, facebook, instagram and xiaohongshu.
OpenCLI's own documentation (docs/guide/browser-bridge.md) states that the project does not publish to the Chrome Web Store. Its recommended install is "Method 1: Download Pre-built Release" — the opencli-extension-v{version}.zip from GitHub Releases, loaded unpacked via chrome://extensions. OpenCLI's runtime error for BROWSER_CONNECT also points at Releases, so agent-reach's hint contradicts both the upstream docs and the upstream tool.
The Web Store listing's developer contact is [email protected], which does not match the OpenCLI author. jackwener/OpenCLI#956 asks whether that listing is usable and has no maintainer reply.
This matters more than a broken link: the browser bridge reads the user's logged-in Facebook, Instagram and X sessions. Directing users to a third-party build of it is a credential-exposure risk, and the message currently reads as an official recommendation.
Suggested fix: change the hint to the GitHub Releases + load-unpacked instructions, or, if the Web Store listing is in fact maintained by the project, say so explicitly so users can verify it.
Source: Panniantong/Agent-Reach