Lightpanda
Warn
Audited by Snyk on May 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's SKILL.md and README show the agent using Lightpanda to navigate and extract content from arbitrary public URLs (e.g., MCP tools like
goto/markdown, CLIfetch https://..., and CDP LP.getMarkdown) so the agent will read untrusted third-party web content that can influence actions.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The install script (scripts/install.sh) downloads and installs a remote executable from https://github.com/lightpanda-io/browser/releases/download/nightly/lightpanda-x86_64-linux (and sibling release URLs) after fetching a checksum via the GitHub API (https://api.github.com/repos/lightpanda-io/browser/releases/tags/nightly), which results in executing remote code required for the skill.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata