browser-use-terminal

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Most URLs are standard package/CDN or documentation links, but the presence of a direct install script (curl | sh) plus several non‑trusted/typosquat test domains (e.g. evil.test, evil.example.com, example.com.evil.org) are suspicious because they could be used to deliver arbitrary code or malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Skill.md describes “Browser Use Terminal” as a browser-controlled agent where the model can navigate to arbitrary URLs and ingest page text/screenshots at runtime (e.g., new_tab/capture_screenshot/page_info/js) from URLs the outsider selects.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's setup/install instructions explicitly tell the user to run a remote installer via "curl -fsSL https://browser-use.com/terminal/install.sh | sh", which fetches and executes remote code at setup/runtime and is presented as a required dependency for the skill.