Security audit

Ubuntu Browser Session

Security checks across malware telemetry and agentic risk

Overview

This skill matches its browser-session purpose, but it exposes powerful access to logged-in browser sessions and needs careful review before use.

Install only on a host and network you control. Treat noVNC URLs as access to your logged-in browser, prefer SSH tunnels or localhost-only exposure, firewall the noVNC port, stop the assisted overlay after login recovery, and periodically review or remove stored profiles and session metadata under ~/.agent-browser.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Context-Inappropriate Capability

Medium

Confidence: 95% confidence
Finding: The script intentionally exposes an --eval option that passes arbitrary JavaScript directly into CDP Runtime.evaluate against a live browser session. In the context of a durable Ubuntu browser session with login reuse, this exceeds bounded inspection and can access authenticated page state, DOM content, tokens, or trigger privileged in-session actions on protected sites.

Missing User Warnings

Medium

Confidence: 88% confidence
Finding: The skill exposes direct noVNC URLs for manual login recovery into an authenticated browser session but does not provide strong warnings or controls around remote interactive access. If the noVNC service is reachable by unintended parties, they could hijack live authenticated sessions, view sensitive data, or perform actions as the logged-in user.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The manual start sequence launches x11vnc with `-nopw` and exposes noVNC via `websockify --web=/usr/share/novnc 0.0.0.0:6080`, creating an unauthenticated remote desktop endpoint reachable on all interfaces. In the context of a durable browser profile and protected-site login reuse, anyone who can reach port 6080 could view and control the live browser session, potentially hijacking authenticated accounts and accessing sensitive data.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The script persists sensitive runtime state, including SESSION_KEY, ORIGIN, profile path, and CDP port, into a shell-sourceable file on disk. In the context of a browser-session skill explicitly designed for durable login reuse, this metadata can help an attacker locate and attach to active sessions or reuse persisted browser state if the run directory is readable by other local users or processes.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The script persists an identity-to-profile mapping in ~/.agent-browser/index/identity-profiles.json without any notice, consent check, or minimization. In this skill's context, that file links providers to durable browser profile directories and session metadata, which can silently retain sensitive cross-site login associations and increase privacy/security risk if the host is multi-user, backed up, or later inspected by other tooling.

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The script persists session manifests containing sensitive operational details such as profile_dir, CDP endpoints, websocket debugger URL, display/Xvfb metadata, and browser PID to disk under the user's home directory. In the context of a browser-session skill for protected sites and durable login reuse, these artifacts can materially aid local attackers or other processes in hijacking or inspecting active authenticated sessions if file permissions are not tightly controlled.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.