browser
Warn
Audited by Snyk on Mar 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly navigates to and ingests arbitrary public web pages (see SKILL.md "navigate" and "Read Page Content" example pointing to https://news.ycombinator.com) and the code (browser.mjs functions navigate, getPageText, snapshot, evaluate) exposes page text/structure and executes JS, so untrusted third-party content can be read and can materially influence subsequent clicks/typing/actions.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (low risk: 0.30). The skill does not ask for sudo, create users, or modify system files, but it does advise disabling Chrome's sandbox via CHROME_NO_SANDBOX=1 (a security bypass) and suggests global npm installs, so it poses a low-but-nonzero risk to the host state.
Audit Metadata