Browser Automation

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The browser automation capabilities match the stated purpose, but the implementation is anchored to an under-specified 'browser-mcp' server rather than a clearly verified official Playwright/Puppeteer package. That makes dependency trust the main issue: the skill is coherent in function, yet the executable/control plane is not sufficiently attributable, and the skill can perform consequential website actions through authenticated browser sessions.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Sep 10, 2026, 10:55 AM
Package URL
pkg:socket/skills-sh/ethan-rio%2Fskills%2Fbrowser-automation%2F@093efef521d89ec9720038361e6e5429c85748bb
Security Audit — socket — Browser Automation