browser-use
Warn
Audited by Snyk on Feb 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The "3. Tasks (Subagent)" section (example POST to https://api.browser-use.com/api/v2/tasks) shows the skill runs autonomous browser tasks that visit arbitrary public websites (e.g., Amazon) and return interpreted output, meaning it fetches and ingests untrusted third-party web content that can influence subsequent actions.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill makes runtime calls to https://api.browser-use.com/api/v2 (notably the /tasks endpoint) which runs autonomous browser subagents / an external LLM to perform actions—i.e., remote-executed behavior the skill depends on—so the fetched content effectively executes remote code and controls agent activity.
Audit Metadata