Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- bin/cli.js:41
- Evidence
const result = spawnSync(process.execPath, args, { stdio: "inherit" });
Security audit
@psyb0t/stealthy-auto-browse
Security checks for vulnerabilities and agentic risk
Overview
This package transparently installs a thin bridge to a user-hosted browser automation server, with powerful browser-control risks that are disclosed and aligned with its purpose.
Install only if you intend to give an agent control of a real browser connected to your self-hosted server. Treat it like remote browser-control software: use a dedicated browser profile when possible, avoid sensitive accounts unless necessary, protect the bearer token, and keep the server reachable only where you intend.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.dangerous_exec