camoufox-stealth-browser

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The repository is explicitly designed to evade anti-bot protections and facilitate scraping of protected sites (Airbnb/Yelp) with instructions to reuse/export session cookies and use residential proxies, which enables deliberate abusive scraping and potential credential/session theft and supply-chain risks.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime, the required workflow fetches a user-supplied URL and ingests the fetched page’s HTML/body text via page.content() (outsider-authored free text from public web content) into the script’s returned value/printed checks, which can then be passed into the agent’s LLM context.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill includes an explicit privileged command ("sudo dnf install gtk3 libXt") that instructs modifying system packages using sudo, which pushes the agent/user to alter the machine's state with elevated privileges.