ego-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s runtime workflow runs a Node.js heredoc that uses ego-browser helpers like openOrReuseTab(url) and snapshotText() / browserFetch() to read arbitrary web page text that the user (outsider) can supply via a URL or query.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The install script scripts/install.sh fetches and mounts a DMG at runtime from https://cdn.ego.app/setup/macos/arm64/egolite.dmg and https://cdn.ego.app/setup/macos/x64/egolite.dmg and then installs/launches it, meaning remote executable code is downloaded and run during skill operation.