firefox-browser

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The skill intentionally exposes powerful automation that can execute arbitrary JS in page context, access authenticated sessions and local files, and auto-unlock/fill a Bitwarden vault (even with fingerprint disabled), enabling credential theft and data exfiltration by an automated agent.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow ingests arbitrary outsider-authored page text whenever the agent is instructed to call getContent/getInteractables (and indirectly uses navigate) to read content from attacker-controlled websites in the live Firefox session.