lightpanda-browser

Warn

Audited by Socket on Apr 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The browser automation scope broadly matches the stated purpose, but the install instructions are internally inconsistent with the claimed publisher: they route execution through an unrelated personal GitHub raw script instead of official Lightpanda distribution channels. That supply-chain issue dominates the assessment; the rest of the skill is mostly coherent but inherently powerful and should only be used with explicit user-approved browsing actions.

Confidence: 91%Severity: 86%
Audit Metadata
Analyzed At
Apr 12, 2026, 06:27 AM
Package URL
pkg:socket/skills-sh/Mathews-Tom%2Farmory%2Flightpanda-browser%2F@67bda536fe011b1266939c5ab9bcf353a31d714f