browser-login
Warn
Audited by Socket on May 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s purpose and capabilities mostly align, but it handles highly sensitive session cookies, extracts them via browser instrumentation, and stores reuse handles through an unpinned external CLI. This is proportionate to a browser-login skill, yet the combination of session capture, persistence, and mutable runtime dependency makes it medium-to-high security risk rather than benign.
Confidence: 82%Severity: 66%
Audit Metadata