Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- scripts/per-agent-browser.mjs:103
Security audit
Playwright Per-Agent Browser Pool
Security checks across malware telemetry and agentic risk
Overview
This skill appears to be a disclosed local Playwright browser-profile manager, with the main user risk being intentional browser session persistence or sharing depending on the selected mode.
Install this only if you want agents to launch and reuse local browser sessions. Use per-agent or ephemeral mode for separate accounts or sensitive sites, avoid shared mode unless those agents may act as the same browser identity, and set AGENT_BROWSER_REGISTRY to a private per-user path on shared machines.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.dangerous_exec