Security audit

Agent Browser Disabled

Security checks across malware telemetry and agentic risk

Overview

This browser automation skill is purpose-aligned, but it needs Review because it gives agents access to cookies, local storage, captures, and saved login sessions without enough safety guidance.

Install only if you trust the upstream agent-browser CLI and are comfortable letting an agent control a browser. Use separate test accounts or isolated browser sessions for sensitive sites, protect auth.json and capture files like credentials, and confirm any action that submits data, changes account state, uploads files, posts content, or makes purchases.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Rogue AgentSelf-Modification, Session Persistence
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The skill explicitly documents saving and loading authenticated browser state (`auth.json`) but provides no warning that the file may contain cookies, tokens, and other session material that can grant account access. In an agent context, users may persist or share this file insecurely, leading to credential/session theft and cross-session account compromise.

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The documentation promotes screenshots, PDFs, traces, and video recordings without warning that these artifacts can capture sensitive page contents, PII, secrets visible in forms, and authenticated session behavior. In automated-agent use, these files may be written to shared workspaces or logs and later exfiltrated or retained longer than intended.

Session Persistence

Medium

Category: Rogue Agent
Content: ```bash agent-browser state save auth.json # Save session state agent-browser state load auth.json # Load saved state ``` ## Example: Form submission
Confidence: 95% confidence
Finding: Load saved state

Session Persistence

Medium

Category: Rogue Agent
Content: agent-browser wait --url "/dashboard" agent-browser state save auth.json # Later sessions: load saved state agent-browser state load auth.json agent-browser open https://app.example.com/dashboard ```
Confidence: 96% confidence
Finding: load saved state

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.