browserbase-sdk

Warn

Audited by Socket on Apr 27, 2026

1 alert found:

Security
SecurityMEDIUM
references/stealth-and-captcha.md

This fragment documents a browser automation configuration that is explicitly geared toward bypassing bot protections (anti-detection/verified fingerprinting) and auto-resolving multiple CAPTCHA providers by default. It also defaults to ignoring TLS certificate errors, weakening transport security if used outside tightly controlled environments. No direct malicious payload or data-exfiltration mechanism is shown in the provided text, but the described capability set is sufficiently aligned with access-control bypass/automation abuse to warrant elevated security review and strict governance.

Confidence: 62%Severity: 72%
Audit Metadata
Analyzed At
Apr 27, 2026, 12:44 AM
Package URL
pkg:socket/skills-sh/thatjuan%2Fagent-skills%2Fbrowserbase-sdk%2F@20a38cd44f6934cb322e8128b690cd58b817e3c7