Agent Browser

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). star-swap.com is a third‑party site referenced for OAuth and the skill explicitly instructs reusing your real Chrome profile/session (a high-risk privacy/session‑theft vector); the GitHub link points to a GitHub repo (source code) and is lower risk in this context.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow includes using agent-browser open <url> followed by agent-browser snapshot -i --json, which ingests page content from an arbitrary (outsider) URL into the agent’s LLM context via the snapshot output.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL includes an explicit installation-from-source step that runs "git clone https://github.com/vercel-labs/agent-browser" followed by build/install commands, which fetches remote code that will be built/executed locally (https://github.com/vercel-labs/agent-browser).