jb-browser

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose matches browser-hunt automation, and the credential scope is fairly narrow, but the trust story is weak: the skill requires a bundled local jb executable whose exact publisher/provenance is not verifiable from the provided evidence, and multiple conflicting public Jev Browser distributions make the binary identity ambiguous. Data flow to a model provider is disclosed and proportionate, but relying on an unverifiable local CLI keeps overall risk high.

Confidence: 78%Severity: 72%
Audit Metadata
Analyzed At
Sep 23, 2026, 07:06 AM
Package URL
pkg:socket/skills-sh/hqman%2Fjev-browser-skill%2Fjb-browser%2F@7fddc258b5f353dbacb55a495b807148aa5119804ff82091e9ca62b3c320e87e