agent-browser

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These include a high‑risk installer URL (https://agent-browser.sh) — it invites running a remote curl|bash installer from an unvetted domain which can deliver arbitrary executables and is therefore suspicious; https://example.com is a harmless placeholder, and http://localhost:4848 is just a local service endpoint (not an external download source).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s required workflow includes navigating to arbitrary URLs (e.g., agent-browser navigate https://example.com), which causes the agent to ingest browser-extracted page text/DOM/accessibility snapshots from public web content at runtime—an outsider-authored free-text source.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The install step runs a remote installer via "curl -fsSL https://agent-browser.sh | bash", which fetches and immediately executes remote code as a required installation step, so the URL (https://agent-browser.sh) is a high-risk runtime dependency.