workday-browser

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The skill contains high-risk, intentional patterns: it instructs closing/relaunching the user's real browser profile and attaching via CDP to reuse a live SSO session (giving direct access to authenticated cookies/tokens), includes repeated code to scrape/download sensitive HR/PII (payslips, rosters, inbox items), and provides programmatic approval/auto-approve flows that can modify records — all of which enable data exfiltration and acting as the user if abused.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs closing the user's browser and relaunching their real profile with --user-data-dir and --remote-debugging-port to attach via CDP and reuse a live authenticated session, which manipulates local processes and user browser state and can access sensitive sessions.