Back to skill

Security audit

Work Productivity Agent Browser Workflow Helper

Security checks for vulnerabilities and agentic risk

Overview

This skill provides ordinary workflow guidance, with broad activation wording but no harmful behavior found in its files.

Expect general planning and implementation guidance; browser automation depends on your existing tools. Consider explicit invocation because generic keywords may cause this skill to activate for unrelated requests.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

Usage keywords include broad terms such as `tree`, `optimized`, `cli`, and `bug fix` without limiting them to Agent Browser workflows.

Medium
Category
Trigger Abuse
Confidence
91% confidence
Finding

These keywords occur in many unrelated requests and do not reliably identify an Agent Browser task. Although the README lists more specific trigger sentences, it does not state that the generic keywords require Agent Browser context or exclude unrelated uses.

Content

No source excerpt is available for this finding.

Activation criteria include generic keywords and unrestricted requests for practical assistance.

Medium
Category
Trigger Abuse
Confidence
99% confidence
Finding

The description activates the skill for requests involving a practical workflow, artifact, checklist, analysis, or implementation support, while the trigger list includes generic terms such as tree, optimized, and bug fix. These criteria overlap with many unrelated tasks and have no explicit exclusions or requirement that the request concern Agent Browser workflows.

Content

No source excerpt is available for this finding.

Activation keywords include broad, context-free terms such as `tree`, `optimized`, `accessibility`, and `bug fix`.

Medium
Category
Trigger Abuse
Confidence
98% confidence
Finding

These keywords occur in many requests unrelated to Agent Browser workflows and could cause unintended activation. The skill provides no exclusion conditions or requirement that these terms appear in an Agent Browser-specific context.

Content

No source excerpt is available for this finding.

Usage keywords include overly broad terms without an Agent Browser context requirement.

Low
Category
Trigger Abuse
Confidence
88% confidence
Finding

The keyword list includes generic terms such as tree, optimized, cli, and bug fix, which commonly occur in unrelated requests. Although the subsequent trigger sentences mention Agent Browser, the file does not clarify whether these keywords can independently activate the skill.

Content

No source excerpt is available for this finding.

Implicit invocation is enabled despite an incoherent, truncated description that does not define a clear activation scope.

Low
Category
Trigger Abuse
Confidence
94% confidence
Finding

The description and default prompt contain truncated demand-summary text rather than a clear statement of the tasks this skill handles. With implicit invocation enabled, these descriptions do not reliably distinguish when the skill should activate from unrelated browser or productivity requests.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.