agent-browser

Warn

Audited by Runlayer on Mar 6, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
81%
Files
9
Flagged
8
Chunks
10
Flagged Files (8)
agent-browser/templates/form-automation.shMEDIUM
80.9%

Risky tool definition detected

Tool: agent-browser/templates/form-automation.sh Description: #!/bin/bash # Template: Form Automation Workflow # Fills and submits web forms with validation set -euo pipefail FORM_URL="${1:?Usage: $0 <form-url>}" echo "Automating form at: $FORM_URL" # Navigate to form page agent-browser open "$FORM_URL" agent-browser wait --load networkidle # Get interactive snapshot to identify form fields echo "Analyzing form structure..." agent-browser snapshot -i # Example: Fill common form fields # Uncommen

agent-browser/references/session-management.mdMEDIUM
76.0%

Risky tool definition detected

## Named Sessions Use `--session` flag to isolate browser contexts: ```bash # Session 1: Authentication flow agent-browser --session auth open https://app.example.com/login # Session 2: Public browsing (separate cookies, storage) agent-browser --session public open https://example.com # Commands are isolated by session agent-browser --session auth fill @e1 "user@example.com" agent-browser --session public get text body ``` ## Session Isolation Properties Each session has independent: - Cookies -

agent-browser/references/authentication.mdMEDIUM
75.2%

Risky tool definition detected

agent-browser/SKILL.mdLOW
73.2%

Tool passed security scan

Risky tool definition detected

agent-browser/references/video-recording.mdLOW
72.7%

Risky tool definition detected

# Record E2E test runs for CI artifacts TEST_NAME="${1:-e2e-test}" RECORDING_DIR="./test-recordings" mkdir -p "$RECORDING_DIR" agent-browser record start "$RECORDING_DIR/$TEST_NAME-$(date +%s).webm" # Run test if run_e2e_test; then echo "Test passed" else echo "Test failed - recording saved" fi agent-browser record stop ``` ## Best Practices ### 1.

agent-browser/templates/authenticated-session.shLOW
71.4%

Risky tool definition detected

Delete this DISCOVERY MODE section" echo "" agent-browser close exit 0 # ══════════════════════════════════════════════════════════════ # LOGIN FLOW: Uncomment and customize after discovery # ══════════════════════════════════════════════════════════════ # : "${APP_USERNAME:?Set APP_USERNAME environment variable}" # : "${APP_PASSWORD:?Set APP_PASSWORD environment variable}" # # agent-browser open "$LOGIN_URL" # agent-browser wait --load networkidle # agent-browser snapshot -i # # # Fill credenti

agent-browser/references/proxy-support.mdLOW
71.2%

Risky tool definition detected

agent-browser/templates/capture-workflow.shLOW
71.0%

Risky tool definition detected

Tool: agent-browser/templates/capture-workflow.sh Description: #!/bin/bash # Template: Content Capture Workflow # Extract content from web pages with optional authentication set -euo pipefail TARGET_URL="${1:?Usage: $0 <url> [output-dir]}" OUTPUT_DIR="${2:-.}" echo "Capturing content from: $TARGET_URL" mkdir -p "$OUTPUT_DIR" # Optional: Load authentication state if needed # if [[ -f "./auth-state.json" ]]; then # agent-browser state load "./auth-state.json" # fi # Navigate to target page age

Passed Files (1)Click to expand
agent-browser/references/snapshot-refs.mdOK
36.8%

Tool passed security scan

Audit Metadata
Max File Score
81%
Classification
UNKNOWN_SERVER
Files Scanned
9
Files Flagged
8
Chunks Analyzed
10
Analyzed
Mar 6, 2026, 05:29 AM
Security Audit — runlayer — agent-browser