agent-browser

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt contains examples and commands that embed credentials or passwords directly as literal strings or CLI arguments (e.g., fill @e2 "password123", set credentials user pass), which requires the agent to handle and output secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly navigates and fetches arbitrary web pages via "agent-browser open " and then inspects and acts on their content using commands like "agent-browser snapshot", "agent-browser get text/get html", and "agent-browser eval", so untrusted third‑party page content can directly influence subsequent actions.