T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:93- Finding
Unverified Remote Closed-Source Browser Kernel Download and Execution
- Content
View full analysis
- Remediation
View remediation
Security audit
Anti-Detect Browser
Security checks for vulnerabilities and agentic risk
Overview
The skill is openly documented and purpose-aligned, but it asks users to run a downloaded closed-source browser binary and includes a few under-scoped setup examples that merit review before installation.
Install only if you are comfortable running AntiBrow's closed-source browser kernel with the privileges of the chosen user or container. Pin SDK and dependency versions, prefetch and verify artifacts in an isolated build where possible, keep API keys and proxy URLs in a secrets manager, avoid printing Live View URLs to shared logs, and keep `~/.anti-detect-browser/` and `~/.antibrow/` out of shared backups, images, and support bundles.
Vulnerability Patterns
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Findings (3)
T08 · Insecure Dependencies
Warning
- Location
SKILL.md:58- Finding
Unpinned Third-Party Package Installation Commands
- Content
View full analysis
- Remediation
View remediation
T09 · Insecure Skill Coding Practices
Warning
- Location
SKILL.md:196- Finding
Capability-Bearing Live View URL Exposed Through Standard Output
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (8)
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
- Content
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The file advertises a
DELETE /profiles/:nameendpoint but provides no warning that the operation removes a profile and may be irreversible. For markdown files, safety-relevant behaviors that can affect user data should be accompanied by a clear warning or caution.- Content
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 75% confidence
- Finding
Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
- Content
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 81% confidence
- Finding
The document states that credentials come from the environment and shows use of
ANTIBROW_API_KEY, but it does not warn users to protect the key or avoid leaking it in logs, shells, or shared environments. For markdown skill descriptions, omission of privacy or credential-safety warnings can be a user-warning gap.- Content
Tool Parameter Abuse
Low
- Category
- Tool Misuse
- Confidence
- 15% confidence
- Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
- Content
md xvfb libnss3 libatk1.0-0 libatk-bridge2.0-0 libcups2 libdrm2 \ libxkbcommon0 libxcomposite1 libxdamage1 libxfixes3 libxrandr2 \ libgbm1 libasound2 libpango-1.0-0 libcairo2 fonts-liberation ca-certificates \ && rm -rf /var/lib/apt/lists/* RUN pip install --no-cache-dir antibrow==0.3.0 RUN python -m antibrow install # prefetch the kernel at build time, not at run time COPY script.py .
Tool Parameter Abuse
Low
- Category
- Tool Misuse
- Confidence
- 15% confidence
- Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
- Content
md xvfb libnss3 libatk1.0-0 libatk-bridge2.0-0 libcups2 libdrm2 \ libxkbcommon0 libxcomposite1 libxdamage1 libxfixes3 libxrandr2 \ libgbm1 libasound2 libpango-1.0-0 libcairo2 fonts-liberation ca-certificates \ && rm -rf /var/lib/apt/lists/* RUN pip install --no-cache-dir antibrow==0.3.0 RUN python -m antibrow install # prefetch the kernel at build time, not at run time COPY script.py .
Chaining Abuse
Low
- Category
- Tool Misuse
- Confidence
- 15% confidence
- Finding
Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.
- Content
md xvfb libnss3 libatk1.0-0 libatk-bridge2.0-0 libcups2 libdrm2 \ libxkbcommon0 libxcomposite1 libxdamage1 libxfixes3 libxrandr2 \ libgbm1 libasound2 libpango-1.0-0 libcairo2 fonts-liberation ca-certificates \ && rm -rf /var/lib/apt/lists/* RUN pip install --no-cache-dir antibrow==0.3.0 RUN python -m antibrow install # prefetch the kernel at build time, not at run time COPY script.py .
Static analysis
No suspicious patterns detected.