OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Mar 6, 2026
Independent checks from skills.sh's audit partners.
This skill provides a comprehensive browser automation interface. Security risks include the potential for arbitrary JavaScript execution via the 'eval' command and inherent susceptibility to indirect prompt injection from untrusted web content. The skill also allows access to the local file system via the 'file://' protocol and the saving of sensitive session state to local files, which requires careful management of authentication tokens.
Detected behaviors
No alerts
No issues
8/9 files flagged