website-login
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
cookeyCLI through standard package managers (npm install -g @cookey/cli,pip install cookey) or by downloading prebuilt binaries directly from the author's GitHub repository (github.com/Lakr233/Cookey). - [COMMAND_EXECUTION]: The skill's primary functionality is driven by executing a series of local shell commands using the
cookeyCLI to manage login requests and session exports. - [DATA_EXFILTRATION]: The tool facilitates the transfer of session data via an external relay server (
api.cookey.shor a user-defined URL). While the documentation states this transport is encrypted and zero-knowledge, it involves transmitting data derived from authenticated browser sessions over the network. - [DATA_EXFILTRATION]: The skill captures and writes sensitive authentication materials, such as cookies and localStorage, into local files (e.g.,
storageState.json) to enable local automation workflows.
Audit Metadata