browser-harness

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). This list contains direct links to an unexpected shell script on a non-official site and Facebook redirector endpoints (which can obscure final destinations), both of which are high-risk indicators for malware distribution or unwanted redirects.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the browser-harness skill navigates to user-supplied or attacker-controlled URLs (e.g., goto("https://www.amazon.com/s?k=...") / goto(next_url) / new_tab(url)) and reads page text/DOM via wait_for_load(), js(...), and page_info()—so outsider-authored content from the visited page can be ingested directly.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill opens and interacts with live pages that load and execute remote code at runtime—specifically the Booking.com WAF script "https://www.booking.com/__challenge_{KEY}/{HASH}/challenge.js" (and its reporting endpoint https://reports.booking.com/chal_report) which must run to access site content, and the CentileBrain Shiny iframe URLs "https://centilebrain-app.shinyapps.io/{SV|CT|SA}-{MALE|FEMALE}/" which host remote Shiny apps used for computation/downloads.