tekin

• Analyzed: May 12, 2026, 3:03 AM
• Findings: 1
• Version: 1.0.0
• Hash: 014ce041f5f23b38f768a03a05fd5693bb1a1e17b94218a73f8c8bf3002cd552
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to the broad range of powerful capabilities exposed through the `agent-browser` CLI, granted by `allowed-tools: Bash(agent-browser:*)` in `SKILL.md`. While these features are legitimate for browser automation, they present significant risk if abused. Key indicators include the ability to upload local files (`agent-browser upload`), execute arbitrary JavaScript within the browser context (`agent-browser eval`), access and manipulate browser cookies and local storage (`agent-browser cookies`, `agent-browser storage`), save browser session state to disk (`agent-browser state save`), and intercept/mock network requests (`agent-browser network route`). These capabilities, without explicit malicious instructions, make the skill highly susceptible to prompt injection or misuse by a compromised agent.