Security checks across malware telemetry and agentic risk
This is a useful article backup skill, but it needs Review because it can drive a logged-in browser session, scrape arbitrary sites, and contains an unsafe shell invocation reachable through user-provided input.
Install only if you trust the publisher and are comfortable granting automation access to a logged-in Chrome session. Use a dedicated browser profile with only the intended account logged in, avoid untrusted URLs or selector files, review the save directory, and do not enable cron scheduling unless you have retention and monitoring in place. The shell=True URL handling should be fixed before broad use.
time.sleep({profile["wait_after_load"]})
print("OK")
'''
result = subprocess.run(
f"printf '{navigate_code}' | browser-harness",
shell=True,
capture_output=True,try:
with open(tmp_path, "r") as f:
result = subprocess.run(
["browser-harness"],
stdin=f,
capture_output=True,67/67 vendors flagged this skill as clean.