Skills
Navigate
skills/laststance/skills/cookie/Gen Agent Trust Hub

cookie

Fail

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: HIGHDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses execFileSync to run the macOS security utility, programmatically fetching the 'Chrome Safe Storage' password from the system Keychain.
  • [COMMAND_EXECUTION]: The script executes the system sqlite3 binary to query the Chrome cookies database.
  • [DATA_EXFILTRATION]: The skill accesses highly sensitive application data in ~/Library/Application Support/Google/Chrome to snapshot the cookies database.
  • [DATA_EXFILTRATION]: The skill decrypts all browser session tokens and writes them in plaintext to /tmp/chrome-pw-cookies.json and /tmp/chrome-load-cookies.js. Although the script attempts to set restrictive file permissions (0o600), storing decrypted session tokens in a shared temporary directory is a dangerous practice that exposes the user to session hijacking.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jul 2, 2026, 10:15 AM
Security Audit — agent-trust-hub — cookie