camofox-browser

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's browsing and scraping capabilities broadly match its stated purpose, and the documented network flow is mostly to localhost plus target websites. The main issue is install trust: it silently downloads and executes an unspecified anti-detection browser binary with no verifiable provenance, while enabling interaction with arbitrary sites and handling potentially sensitive user input. The bot-evasion purpose is internally coherent, but the opaque binary and anti-detection focus make the overall risk high.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Sep 17, 2026, 06:46 PM
Package URL
pkg:socket/skills-sh/yelban%2Fcamofox-browser-skills%2Fcamofox-browser%2F@58406c20c321afc350ff4c14695a704d9e5c7efaaaf8eee77225c19d6362b574