browser-automation
Fail
Audited by Snyk on Feb 28, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The skill's API requires the agent to emit function calls like handleFill({selector, value}) and similar actions that would include user-supplied form values (passwords, API keys, tokens) verbatim in the LLM's output, creating an exfiltration risk.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly navigates to arbitrary URLs and reads/executes page content (see SKILL.md/README and index.js handlers like handleNavigate, handleNewPage, handleGetContent, handleGetText, and handleEvaluate), so the agent will ingest untrusted public web pages whose content can directly influence subsequent actions.
Audit Metadata