browser-cdp — security audits

Flagged by auditors

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  fail

  This skill automates browser control by copying the user's Chrome profile—including sensitive cookies and saved passwords—to a debug directory and forcefully terminating existing Chrome processes. It also contains instructions for extracting authentication tokens from active browser sessions.

  Risk: HIGHCREDENTIALS_UNSAFECOMMAND_EXECUTIONDATA_EXFILTRATIONMay 10, 2026Full report

• Socket

  warn

  2 alerts: gptSecurity

  May 10, 2026Full report

• Snyk

  fail

  Risk: CRITICAL · 3 issues

  Risk: CRITICALMay 10, 2026Full report