agent-browser
Fail
Audited by Snyk on Mar 6, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt's CLI examples (e.g., agent-browser fill @e2 "password123" and fill "user@example.com") and commands that take string arguments require embedding plaintext credentials or secrets directly into generated commands, creating an exfiltration risk.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's CLI explicitly supports navigating to arbitrary URLs and extracting/interpreting page content (e.g., "agent-browser open ", "agent-browser snapshot", "agent-browser get html/get text", "agent-browser eval", and "agent-browser diff url ") which means it fetches untrusted public web pages and uses that content to drive interactions and decisions, enabling indirect prompt injection.
Audit Metadata