browser-jev-automation
Warn
Audited by Socket on Oct 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s capabilities mostly match its stated browser-automation purpose, but its footprint is high-risk because it forwards secrets/headers into browser sessions and sends page content to external model APIs. Data flows are disclosed and partially constrained, so this is not confirmed malware, but remote browsing plus credential forwarding make the security risk meaningfully above normal developer-documentation skills.
Confidence: 87%Severity: 68%
Audit Metadata