Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 24, 2026
Independent checks from skills.sh's audit partners.
The 'steel-browser' skill integrates the Steel cloud browser platform, allowing agents to automate web tasks, scrape content, and interact with complex web pages. It features an automated installation process for its CLI tool and provides advanced capabilities like JavaScript execution within browser sessions. While the setup and tool execution are consistent with vendor-provided functionality, the skill is susceptible to indirect prompt injection when processing untrusted web content.
Detected behaviors
No alerts
3 issues
5/6 files flagged
1 finding · Score: 82/100