browse
Warn
Audited by Socket on Oct 27, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core Browserbase automation capabilities and npm-based installation are broadly consistent with the stated purpose and official publisher evidence, so this is not malware. The main security concern is transitive trust: the skill can discover and install additional Browse.sh skills, expanding agent behavior beyond the reviewed content; combined with broad web-ingestion and credentialed remote automation, this makes the skill medium risk overall.
Confidence: 91%Severity: 56%
Audit Metadata