open-source
Warn
Audited by Socket on Aug 26, 2026
1 alert found:
AnomalyAnomalyreferences/browser.md
LOWAnomalyLOW
references/browser.md
No direct malware behavior is evident in the provided fragment because it is primarily documentation/configuration examples. However, it explicitly describes security-sensitive, dual-use capabilities (automating 2FA code retrieval and bypassing protections) and shows how to connect to remote/cloud infrastructure via CDP/proxy, including proxy credential handling and reuse of existing authenticated browser sessions. This creates meaningful misuse/operational risk if the full package implements these workflows, but the excerpt alone does not confirm malicious intent.
Confidence: 40%Severity: 60%
Audit Metadata