Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent cloud browser automation skill, but it needs review because broad autonomous web actions can send user data or submit forms without explicit guardrails.
Install only if you are comfortable delegating browsing to Lightcone's cloud browser. Avoid secrets unless necessary, and require explicit user confirmation before logins, payments, form submissions, posting, account changes, or handling confidential business or personal data.
The activation text is very broad and matches common requests like browsing websites, scraping pages, checking prices, filling forms, or operating web apps. That creates a real risk of unintended invocation of a powerful browser-automation skill, which can cause external actions, data submission, and retrieval of screenshots/page content without sufficiently deliberate user intent.
The skill describes cloud-based browser automation that can type into forms and return page content and screenshots, but it does not warn users that their prompts and entered data may be sent to external websites and processed in a remote environment. In this context, the omission is dangerous because users may unknowingly disclose sensitive personal, account, or business information to third parties or have sensitive on-screen data captured in screenshots.
No suspicious patterns detected.
