Security audit
Security checks for vulnerabilities and agentic risk
This skill is a browser automation helper, but it is explicitly framed around bypassing anti-bot protections and includes sensitive session, proxy, and recording capabilities without enough safety boundaries.
Review carefully before installing. Use only for sites and accounts where you have clear authorization, avoid storing or reusing cookies unless necessary, disable video recording by default, and do not route authenticated traffic through untrusted proxies.
The narrative framing says the skill provides guidance for using stealth browser tools and for remaining undetected, which is classic evasion language rather than neutral automation documentation. That context increases risk because it conditions the agent to conceal activity while interacting with defended systems.
The README explicitly advertises stealth browser automation to bypass bot detection from named protection providers and presents this as a supported capability. In the context of an agent skill, this meaningfully enables evasion of access controls and abuse of third-party sites, especially because no safety boundaries, authorization requirements, or legitimate-use constraints are stated.
The description uses softened natural language like 'perform stealth browser automation to bypass bot detection,' but the operational meaning is still evasion of defensive controls. In a skill manual, this is dangerous because it can disguise prohibited behavior as ordinary automation while still teaching the agent to defeat protections.
The stepwise usage section teaches the agent to use stealth tooling for protected target URLs and to handle anti-bot blockers, CAPTCHAs, and timeouts gracefully, which amounts to operational guidance for working around defenses. This makes the skill more dangerous than a vague description because it provides actionable workflow patterns that support unauthorized scraping or account abuse.
The skill explicitly instructs agents to save and restore authentication cookies, which can enable session hijacking if those cookies are exposed, persisted insecurely, or reused across tasks. In the context of a stealth-browsing skill designed to bypass bot protections, session reuse is especially sensitive because it facilitates covert authenticated access without reauthentication and without any warning, consent, or handling guidance.
The skill recommends recording browser interaction videos and saving them to disk, but provides no warning that recordings may capture passwords, personal data, session tokens, or other sensitive on-screen information. Because this skill is intended for stealth interaction on protected sites, recordings may also preserve evidence of authenticated or sensitive workflows that should not be retained by default.
The skill instructs users to route traffic through proxies and supply proxy credentials, but omits any warning that requests and credentials may traverse third-party infrastructure and be logged or intercepted. In a stealth-browsing skill explicitly aimed at bypassing Cloudflare, Akamai, and Datadome, proxy use materially increases the risk of covert traffic laundering, credential exposure, and abuse of untrusted network intermediaries.
No suspicious patterns detected.
