setup-browser-cookies
Fail
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Bun runtime installation script from the official domain
https://bun.sh/install. The script includes a SHA-256 checksum verification step to ensure the integrity of the downloaded file before execution. - [REMOTE_CODE_EXECUTION]: Executes the downloaded Bun installer using
bashafter verification. This is used to set up the environment for the browser automation tools. - [COMMAND_EXECUTION]: Runs a local setup script (
./setup) and invokes a pre-compiled binary (browse) to manage cookie extraction and interface with the browser. - [DATA_EXFILTRATION]: Accesses sensitive local data, specifically browser cookie databases and system credential stores (macOS Keychain and Linux libsecret), to retrieve session tokens. This is the primary stated purpose of the skill and is gated by a user confirmation prompt.
- [PROMPT_INJECTION]: Exposure to indirect prompt injection through the ingestion of untrusted data from the user's browser environment (e.g., cookie domains and metadata) which is then processed by the agent.
- Ingestion points: Browser cookie databases.
- Boundary markers: None identified.
- Capability inventory: Subprocess execution via Bash tool and binary execution.
- Sanitization: None identified.
Recommendations
- HIGH: Downloads and executes remote code from: https://bun.sh/install - DO NOT USE without thorough review
Audit Metadata