jb-browser
Warn
Audited by Socket on Sep 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose matches browser-hunt automation, and the credential scope is fairly narrow, but the trust story is weak: the skill requires a bundled local jb executable whose exact publisher/provenance is not verifiable from the provided evidence, and multiple conflicting public Jev Browser distributions make the binary identity ambiguous. Data flow to a model provider is disclosed and proportionate, but relying on an unverifiable local CLI keeps overall risk high.
Confidence: 78%Severity: 72%
Audit Metadata