Security audit
Security checks for vulnerabilities and agentic risk
The skill is a browser automation helper, but it can automatically use a remote cloud browser and persistent login profiles without enough user control or privacy guidance.
Install only if you are comfortable with browser tasks potentially running in Browserbase when keys are available. Use local-only execution for sensitive sites, avoid personal or privileged accounts in persistent profiles, and clear or destroy profiles after use until the skill documents storage, retention, and cleanup behavior.
The skill automatically selects a cloud provider and promotes remote browser sessions without warning that visited pages, credentials entered during automation, screenshots, and other browsing artifacts may be transmitted to or processed by a third-party service. Users may unknowingly send sensitive data to a remote environment, creating privacy, compliance, and account-security risks.
The skill advertises profile creation and connection with persisted logins but does not warn users that browser profiles may retain authentication cookies, session tokens, autofill data, and other sensitive state across runs. This can lead to unintended account reuse, credential exposure, or cross-task data leakage, especially in shared or cloud-backed automation workflows.
