BrowserOS CLI

• Analyzed: Mar 31, 2026, 9:51 PM
• Findings: 1
• Version: 1.0.0
• Hash: b551165acca474a7a0be120ce4d1adb5bc6a5fc08fdaf117e7650e5b25078d28
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a comprehensive interface for browser automation via `browseros-cli`, which includes high-risk capabilities such as accessing browser history and bookmarks, uploading/downloading files to/from the host, and executing arbitrary JavaScript via `eval`. While these features are aligned with the stated purpose and the `SKILL.md` includes safety guidelines, the broad access to sensitive user data and the requirement to install global NPM packages and download external binaries (`browseros-cli install`) represent a significant attack surface. No evidence of intentional malice was found in `SKILL.md` or `references/cli-commands.md`.