web-access-claude-skill

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's capabilities mostly match its stated purpose, but that purpose is extremely broad and grants an agent authenticated browser control, file upload, screenshots, and arbitrary-site interaction using the user's Chrome session. The main risk is disproportionate scope and autonomous real-world action potential, not confirmed malware or hidden exfiltration.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Sep 14, 2026, 10:39 AM
Package URL
pkg:socket/skills-sh/reason-machines%2Ftrending-skills%2Fweb-access-claude-skill%2F@eda8c92cf6a5c02b6a1e08250233230085204dcb5af66af32d2e884d879984dd