Security audit
Security checks across malware telemetry and agentic risk
This is a legitimate browser automation skill, but it gives broad website and session-control power with weak warnings around saved login state and captured page artifacts.
Install only if you trust the agent-browser package source and preferably pin a known version. Use isolated test accounts or sessions, avoid saving production login state, keep auth.json and media artifacts out of repos and shared logs, delete them when done, and require explicit approval before uploads, form submissions, purchases, account changes, or other irreversible website actions.
```bash agent-browser state save auth.json # Save session state agent-browser state load auth.json # Load saved state ``` ## Example: Form submission
agent-browser wait --url "/dashboard" agent-browser state save auth.json # Later sessions: load saved state agent-browser state load auth.json agent-browser open https://app.example.com/dashboard ```
63/63 vendors flagged this skill as clean.
No suspicious patterns detected.
