agent-browser
Fail
Audited by Snyk on Feb 28, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The prompt includes commands and examples that pass credentials and passwords as literal CLI arguments (e.g., fill "password123", proxy URLs with user:pass, set credentials user pass, cookies/storage set name value), which encourages embedding secrets verbatim in outputs.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill explicitly navigates to arbitrary URLs (agent-browser open ) and snapshots/reads page content (agent-browser snapshot, get text/get html, eval), meaning it ingests untrusted public web content that can influence subsequent actions like clicks, form fills, and scripts, enabling indirect prompt-injection from third-party pages.
Audit Metadata