lightpanda-browser
Warn
Audited by Socket on Apr 12, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The browser automation scope broadly matches the stated purpose, but the install instructions are internally inconsistent with the claimed publisher: they route execution through an unrelated personal GitHub raw script instead of official Lightpanda distribution channels. That supply-chain issue dominates the assessment; the rest of the skill is mostly coherent but inherently powerful and should only be used with explicit user-approved browsing actions.
Confidence: 91%Severity: 86%
Audit Metadata