browser

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes examples that embed plaintext credentials and an Authorization header with a bearer token directly in agent-browser commands, which forces the agent to handle/output secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Browser automation via agent-browser open <url> followed by agent-browser snapshot ingests page-rendered accessibility text/HTML (e.g., via snapshot -i and parsing refs like @e1), so outsider-provided web content at a chosen URL can be read at runtime.