OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
The skill provides powerful browser automation capabilities including executing JavaScript, accessing session cookies, and uploading files. These features can be abused to extract sensitive data or perform unauthorized actions if the agent interacts with a malicious website that uses indirect prompt injection.
Detected behaviors
No alerts
2 issues
1/1 file flagged