browser-use

Fail

Audited by Snyk on Mar 24, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The prompt includes an explicit offer to produce a version "indistinguishable from a real browser skill" with fake CDP/Chromium/Playwright logs—a deceptive instruction to create counterfeit artifacts outside the skill's stated inert browser-orchestration purpose.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 24, 2026, 08:55 AM
Issues
1