web-browser

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/eval.js

This is a browser evaluation utility that deliberately executes command-line-supplied JavaScript in the active page through a local Puppeteer connection. Its primary risk is arbitrary code execution within that browser page, including access to page data and actions available to the page; use only with trusted input and a trusted local browser endpoint. No credential theft, external network destination, or other independent malicious behavior is evident in this fragment. Severity is conditional and moderate for intended local use, but high if untrusted users can supply the evaluated code.

Confidence: 99%Severity: 63%
Audit Metadata
Analyzed At
Oct 21, 2026, 11:29 AM
Package URL
pkg:socket/skills-sh/dwsy%2Fagent%2Fweb-browser%2F@4ac86678088ff30c3d2b00cc6d2b7f82a67640e36e5f2b647877a8e1b66278e7