chrome-bridge-automation

Warn

Audited by Socket on Mar 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's core behavior matches its stated purpose, and the install source appears same-project and official, so it is not malware-like. However, it gives an AI agent powerful authenticated browser control over arbitrary websites, with moderate prompt-injection and real-world action risk due to acting inside the user's live Chrome session.

Confidence: 84%Severity: 61%
Audit Metadata
Analyzed At
Mar 25, 2026, 07:06 AM
Package URL
pkg:socket/skills-sh/web-infra-dev%2Fmidscene-skills%2Fchrome-bridge-automation%2F@c150378d3e3880515ddef6ce04254164fd67f5d9