agent-browser
Warn
Audited by Snyk on Mar 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). This skill explicitly directs the agent to open arbitrary web pages (e.g., "agent-browser open ") and to read/interpret page content via commands like "agent-browser snapshot -i", "agent-browser get text body", and "agent-browser eval", which clearly ingests untrusted public web content that can drive clicks/fills/navigation and thus enable indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata