computer-use
Warn
Audited by Socket on Jul 30, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core UI-automation purpose is plausible, but the built-in autonomous installation of third-party fallback skills is disproportionate and creates a transitive trust risk. The main concern is not the browser automation itself, but automatic loading of external skills that can observe and act on sensitive web sessions without separate review.
Confidence: 88%Severity: 82%
Audit Metadata