Skills
skills/browserbase/agent-browse/cookie-sync/Gen Agent Trust Hub

cookie-sync

Warn

Audited by Gen Agent Trust Hub on Jul 19, 2026

Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DATA_EXFILTRATION]: The primary function of the script scripts/cookie-sync.mjs is to extract all session cookies from the local user's browser profile using the Chrome DevTools Protocol (CDP). These cookies are credentials that provide access to the user's authenticated accounts. The skill transmits this data to Browserbase's remote persistent contexts.
  • [COMMAND_EXECUTION]: The skill uses execSync to perform browser version checks on the local host. It also provides examples using node -e to execute inline JavaScript for browser automation and WebSocket communication.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of external Node.js dependencies, specifically @browserbasehq/sdk and @browserbasehq/stagehand, which are downloaded from the npm registry during the setup process.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 19, 2026, 05:54 AM
Security Audit — agent-trust-hub — cookie-sync