Owl Browser

• Outcome: Pass
• Latest audit: Jun 10, 2026 at 6:28 PM UTC
• Version:
  1.0.0

Overview

This skill is a straightforward Owl Browser control guide that uses a user-configured API endpoint and token, with no hidden installer or extra files.

Install this only if you trust the Owl Browser server behind OWL_API_ENDPOINT. Prefer localhost or HTTPS for any non-local endpoint, and avoid entering sensitive credentials or private page data unless you control the server receiving the browser actions and observations.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill instructs the agent to send authenticated requests containing a bearer token to a configurable endpoint, but it does not warn that page contents, typed inputs, navigation targets, and other browsing data will be transmitted to that endpoint. Because the endpoint is environment-controlled and examples even use plain HTTP, a user could unknowingly route sensitive browsing activity or credentials to an untrusted or non-TLS service.

VirusTotal

63/63 vendors flagged this skill as clean.