unbrowse-browser

Warn

Audited by Socket on Mar 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated browser-automation purpose is coherent, but it routes browsing and authenticated actions through an opaque Unbrowse runtime and can execute marketplace skills, creating third-party data-flow and transitive-trust risk. No explicit malware or credential theft is shown, but the external runtime, login flow, and marketplace execution make the footprint higher risk than a simple browser helper.

Confidence: 77%Severity: 58%
Audit Metadata
Analyzed At
Mar 24, 2026, 06:31 PM
Package URL
pkg:socket/skills-sh/lekt9%2Funbrowse-openclaw%2Funbrowse-browser%2F@12efe42237e8dfeb73cf9fea5429e2ab6f6268a0