Security audit

Agent Browser Zc

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent browser automation wrapper, but it gives agents broad control over web sessions and saved login state without enough safety guardrails.

Install only if you are comfortable giving an agent broad browser automation authority. Use separate test accounts or disposable sessions, avoid sensitive logged-in sites unless needed, protect auth.json and recordings/screenshots/traces as secrets, and require confirmation before cookie/storage access, uploads, purchases, posts, or form submissions.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Rogue AgentSelf-Modification, Session Persistence
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The skill explicitly recommends saving and loading browser session state to an auth.json file but does not warn that this file can contain cookies, tokens, and other authenticated session material. In an agent setting, that omission can lead users to persist reusable credentials insecurely, enabling account takeover if the file is exposed, logged, or committed to source control.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The documented features include screenshots, PDFs, video recording, request inspection, cookies, and localStorage access, all of which can capture or expose highly sensitive page data such as credentials, tokens, personal information, and internal application content. Without privacy and handling guidance, an agent may collect or persist this data in files, stdout, traces, or logs unintentionally.

Session Persistence

Medium

Category: Rogue Agent
Content: ```bash agent-browser state save auth.json # Save session state agent-browser state load auth.json # Load saved state ``` ## Example: Form submission
Confidence: 94% confidence
Finding: Load saved state

Session Persistence

Medium

Category: Rogue Agent
Content: agent-browser wait --url "/dashboard" agent-browser state save auth.json # Later sessions: load saved state agent-browser state load auth.json agent-browser open https://app.example.com/dashboard ```
Confidence: 95% confidence
Finding: load saved state

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.