agent-browser
Fail
Audited by Snyk on Feb 25, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt contains explicit examples and CLI options that embed credentials verbatim (e.g., fill @e2 "password123", --proxy with user:pass, set credentials user pass, cookies set name value), which would require the agent to output secret values directly.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's Navigation and Core workflow (e.g., the "agent-browser open " command and the "snapshot" / "get text" / "get html" actions) explicitly load and read arbitrary public web pages (http/https/file/etc.), so untrusted, user-generated content from those pages can be ingested and influence subsequent automated interactions.
Audit Metadata