X News Crawler

• Outcome: Review
• Latest audit: May 29, 2026 at 9:22 PM UTC
• Version:
  0.1.1

Overview

This skill’s social-platform automation purpose is clear, but it asks users to expose their normal logged-in browser profile through Chrome remote debugging without adequate warning or isolation guidance.

Install only if you understand that the skill may control a logged-in social account through your browser. Prefer a dedicated temporary Chrome profile, bind remote debugging to localhost, close the browser when finished, and do not use your daily profile unless you intentionally accept the cookie, session, and browsing-data exposure.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The skill instructs the user to launch Chrome with remote debugging on their regular profile and explicitly says not to use a separate user-data directory, but it does not warn about the security and privacy implications. Using the regular profile exposes live cookies, authenticated sessions, browsing data, and potentially privileged account access to the automation tool via CDP. Because this skill is specifically designed to crawl a logged-in social platform, the context makes the omission more dangerous, not less.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The documentation instructs users to launch Chrome with a remote debugging port on their regular profile and explicitly discourages using an isolated profile. Exposing CDP against a real browsing profile can grant powerful access to session data, cookies, tabs, and browser actions; if another local process or misconfigured network exposure reaches that port, an attacker could hijack authenticated sessions or extract sensitive data.

VirusTotal

66/66 vendors flagged this skill as clean.