skills/mathruffian-dot/opencode-lazy-packs/opencode-browser/Socket

opencode-browser

Warn

Audited by Socket on Jul 28, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s purpose and capabilities mostly align, and the Playwright portion appears official, but it expands the agent into browser and desktop control and relies on external CLI installs with incomplete provenance for open-computer-use plus an optional transitive installer path. This is better classified as a high-risk automation/setup skill than malware.

Confidence: 80%Severity: 74%

Audit Metadata

Analyzed At

Jul 28, 2026, 02:35 AM

Package URL

pkg:socket/skills-sh/mathruffian-dot%2Fopencode-lazy-packs%2Fopencode-browser%2F@26aef0c81bd8c843f7c8565217055127706ee1301b882dee9568940147d91672