Browser Bookmarks Cleanup

• Outcome: Pass
• Latest audit: May 28, 2026 at 4:49 AM UTC
• Version:
  1.0.0

Overview

This skill does what it claims: it locally analyzes browser bookmarks and history, with bookmark edits requiring an explicit write command and backup.

Install only if you are comfortable letting the agent read local browser bookmarks and history. Keep analysis output and plan files private, run dry-run first, review every planned delete/move/rename/update, close the browser before using --write, and retain the backup file for rollback.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: When the Firefox/SQLite database is locked, the code silently copies the full database to a persistent temporary file on disk using delete=False and then opens that copy. Browser history/bookmark databases can contain sensitive browsing metadata, and creating an undisclosed on-disk duplicate increases exposure to other local processes, forensic recovery, or leftover data if cleanup fails or the process crashes before close_sqlite runs. The skill context makes this more significant because it explicitly processes browser bookmarks/history data, which is privacy-sensitive by nature.

VirusTotal

66/66 vendors flagged this skill as clean.