Security audit

Browserless

Security checks for vulnerabilities and agentic risk

Overview

The Browserless skill is coherent, but its setup instructions ask users to run unverified internet installer scripts directly, so it should be reviewed before installation.

Review this skill before installing. The normal Browserless actions are narrowly scoped, but do not run the listed installer commands unless you trust OOMOL's installer source and delivery path; prefer a signed or version-pinned package, checksum verification, or manually inspecting the downloaded installer first.

A.I.G

Vulnerability Patterns

Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

Findings (1)

T03 · Remote Payload Retrieval and Execution

Error

Location: SKILL.md:57
Finding: Unverified Remote Installer Download and Immediate Execution
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

External Script Fetching

High

Category: Supply Chain
Confidence: 95% confidence
Finding: The skill instructs the agent/user to install software by piping a remotely fetched script directly into a shell (curl ... | bash). This creates a supply-chain and remote code execution risk because any compromise of the hosting domain, transport chain, or installer script would immediately execute arbitrary code on the target system without review.
Content: Scanner excerpt · SKILL.md (reported line 57)May include surrounding context.

oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):

bash
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux

powershell

Static analysis

No suspicious patterns detected.