browser-act-skill-forge

• Analyzed: May 15, 2026, 1:06 PM
• Findings: 1
• Version: 1.0.0
• Hash: 91ff176e2b35a7263c52f9c306a5c09dc4bde51bb71f7de9f6021135d4eb4b76
• Source: palm
• External report: View on VirusTotal

Findings (1)

The bundle describes a 'Skill Forge' designed to reverse-engineer websites and generate new automation skills. It utilizes high-risk execution patterns, including the generation of Python wrappers that execute JavaScript via 'eval' and instructions for the agent to 'never refuse' requests based on the target site's nature (SKILL.md). While these capabilities are consistent with its stated purpose of advanced web scraping and automation, the explicit prompt-injection instructions to bypass safety filters and the meta-programming nature of the tool (code that generates and executes other code) present a significant attack surface without clear evidence of malicious intent.