agent-browser

Fail

Audited by Snyk on Mar 6, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.80). The prompt's CLI examples (e.g., agent-browser fill @e2 "password123" and fill "user@example.com") and commands that take string arguments require embedding plaintext credentials or secrets directly into generated commands, creating an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's CLI explicitly supports navigating to arbitrary URLs and extracting/interpreting page content (e.g., "agent-browser open ", "agent-browser snapshot", "agent-browser get html/get text", "agent-browser eval", and "agent-browser diff url ") which means it fetches untrusted public web pages and uses that content to drive interactions and decisions, enabling indirect prompt injection.
Audit Metadata
Risk Level
HIGH
Analyzed
Mar 6, 2026, 02:03 PM
Security Audit — snyk — agent-browser