Agent Browser

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill's commands and examples instruct embedding passwords/credentials directly into CLI calls and form fills (e.g., agent-browser fill @e2 "password123", agent-browser set credentials user pass), which would require the agent to output secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly navigates to arbitrary external URLs via commands like "agent-browser open " and then snapshots/extracts page content with "snapshot", "get text", "get html", and "eval", so untrusted third‑party web pages can be read and directly influence subsequent agent actions.