corrinehu-kimi-usebrowser
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The SKILL.md workflow explicitly instructs the agent to open and interact with arbitrary public web pages (e.g., "npx agent-browser open " and the example "open https://www.baidu.com"), meaning the agent will fetch and read untrusted third‑party content that could influence subsequent actions.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill instructs running "npm install agent-browser" / "npx agent-browser", which at runtime fetches and executes the agent-browser package from the npm registry (e.g. https://registry.npmjs.org/agent-browser), so this is a required external package download that can execute remote code.
Audit Metadata