notte-browser
Warn
Audited by Snyk on May 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill explicitly navigates to and scrapes arbitrary public URLs (e.g., SKILL.md Quick Start and Basic Web Scraping examples like
notte page goto "https://news.ycombinator.com"andnotte page scrape) and its "Untrusted page content" section states scraped page text and agent observations are delivered to the agent, so untrusted third‑party web content can be read and influence agent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata