Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- run_browser.js:28
Security audit
Personal Agent Browser
Security checks across malware telemetry and agentic risk
Overview
This browser skill has a coherent purpose, but its helper script builds a shell command from the requested URL, which could let a crafted URL run local commands.
Do not install this version unless you are comfortable reviewing and fixing the helper script. At minimum, the author should remove shell interpolation, validate URLs, use execFile/spawn with argument arrays, pin and declare the agent-browser dependency, and correct the privacy claims.
VirusTotal
67/67 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.dangerous_exec