OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Jun 20, 2026
Independent checks from skills.sh's audit partners.
The browser-harness skill is a powerful tool designed to give AI agents direct control over a web browser via the Chrome DevTools Protocol (CDP). While authored by a legitimate vendor, it incorporates high-risk patterns such as arbitrary code execution via Python's exec() function and installation instructions involving piped shell scripts from remote servers. It also possesses capabilities for potential data exposure, such as reading environment variables and capturing screenshots.
Detected behaviors
1 alert: gptSecurity
3 issues