chrome-automation

Warn

Audited by Runlayer on Mar 13, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
85%
Files
7
Flagged
5
Chunks
15
Flagged Files (5)
chrome-automation/SKILL.mdMEDIUM
85.0%

Malicious tool definition detected

```bash agent-browser --auto-connect open <url> ``` ### Why This Matters - The user's Chrome has their cookies, login sessions, and browser state - Opening a new page when one is already available wastes time and may lose login state - Many marketing platforms (social media dashboards, ad managers, CMS tools) require login — reusing an existing logged-in tab avoids re-authentication --- ## Connection Always use `--auto-connect` to connect to the user's running Chrome instance: ```bash agent-brow

chrome-automation/references/agent-browser-setup.mdMEDIUM
76.2%

Malicious tool definition detected

google-chrome --remote-debugging-port=9222 # Windows "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 ``` > **Note**: Chrome 136+ blocks `--remote-debugging-port` with the default profile.

chrome-automation/references/linkedin.mdLOW
64.9%

Tool passed security scan

chrome-automation/references/x.mdLOW
63.9%

Tool passed security scan

chrome-automation/references/hackernews.mdLOW
56.4%

Tool passed security scan

Passed Files (2)Click to expand
chrome-automation/references/devto.mdOK
43.5%

Tool passed security scan

chrome-automation/references/reddit.mdOK
34.1%

Tool passed security scan

Audit Metadata
Max File Score
85%
Classification
KNOWN_SERVER_KNOWN_TOOL_LIST
Files Scanned
7
Files Flagged
5
Chunks Analyzed
15
Analyzed
Mar 13, 2026, 12:40 PM
Security Audit — runlayer — chrome-automation