chrome-browser
Fail
Audited by Snyk on Mar 10, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The prompt includes explicit plaintext credential examples (e.g., fill commands with "password123") and instructs the agent to fill forms and interact with a logged-in Chrome profile, which encourages embedding or handling secrets verbatim and risks exfiltration.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to open arbitrary web pages and scrape/interpret their contents (e.g., "agent-browser --cdp 9222 open " and "snapshot -i" / "get text" in SKILL.md and references/commands.md), which pulls untrusted public third‑party content into the agent's workflow and can directly influence subsequent actions.
Audit Metadata