Security audit
Browser Opener Skill
Security checks for vulnerabilities and agentic risk
Overview
This skill does what it claims: it opens chosen URLs in local browsers, with no evidence of hidden data access or persistence.
Install only if you want Codex to open browser windows or URLs for you. Avoid running the README's `pip install webbrowser subprocess argparse` command, confirm URLs before opening them, and use private/incognito mode for sites you do not want loaded in your normal logged-in browser session.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.