browser-automation
Fail
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
cloakbrowserpackage and subsequently downloads a ~200MB stealth Chromium binary from a remote source at runtime. - [REMOTE_CODE_EXECUTION]: The downloaded binary is an opaque executable with source-level patches that is executed by the agent to perform browser automation tasks.
- [COMMAND_EXECUTION]: Instructions provide commands for package installation and binary setup triggers, such as
npx cloakbrowser install. - [CREDENTIALS_UNSAFE]: Documentation suggests using proxy URLs that include plain-text credentials (e.g.,
http://user:pass@host:port), which encourages unsafe storage of secrets. - [PROMPT_INJECTION]: The skill ingests untrusted data via scraping (SKILL.md) without boundary markers, using capabilities including browser automation and binary execution, with no evidence of sanitization.
Recommendations
- AI detected serious security threats
Audit Metadata