browser-cdp

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly includes a command to read localStorage tokens and document.cookie (extracting auth tokens/cookies), which would return secrets verbatim to the agent/tool output and enable exfiltration.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs the agent to kill user Chrome processes (pkill/taskkill), run a setup script that can forcibly terminate browsers and reset ~/chrome-debug-profile, which directly modifies system/process state and can cause data loss (even though it asks for user consent).