browser-automation

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to ask for and then "browser_type" email/password fields (and to request credentials on login), which requires embedding user secrets verbatim into agent actions/outputs—an explicit secret-handling/exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow uses browser_navigate/browser_read_page to fetch and ingest arbitrary third-party web page body text (outsider-authored content) into the agent’s LLM context for analysis.