browser-use
Warn
Audited by Socket on May 18, 2026
1 alert found:
SecuritySecurityreferences/setup.md
MEDIUMSecurityMEDIUM
references/setup.md
No direct malicious logic is visible in the provided excerpt because it is installation documentation rather than the installer/package code. However, the guide instructs users to run a remotely fetched script via `curl -fsSL ... | bash` without showing integrity verification, which is a significant supply-chain risk because it enables arbitrary code execution during installation. The malware probability is low based on the excerpt alone, but the overall security risk is moderate-to-high due to the high-impact installer execution pattern and reliance on downstream dependency downloads.
Confidence: 62%Severity: 70%
Audit Metadata