OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill provides browser automation capabilities but introduces significant security risks by encouraging the use of local Chrome user profiles (containing cookies and session data) and providing an 'eval' command for arbitrary JavaScript execution. It is also highly vulnerable to indirect prompt injection from malicious websites.
Detected behaviors
No alerts
No issues
2/2 files flagged
Score: 93/100 · 2 sections analyzed