agent-browser
Fail
Audited by Snyk on Feb 16, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt includes examples and commands that pass passwords, proxy credentials, and other secret values as literal command-line arguments (e.g., agent-browser fill @e2 "password123", --proxy http://user:pass@proxy.com), which requires the LLM to handle or output secrets verbatim.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly navigates to arbitrary URLs (agent-browser open ) and its templates (e.g., templates/capture-workflow.sh, snapshot -i and get text body) fetch and extract content from public websites, meaning the agent will read untrusted third-party web content.
Audit Metadata