ClawHub
Back to skill

Security audit

go-browser-use

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent Go integration guide for the Browser Use Cloud API and its sensitive actions are disclosed and user-directed.

Install this only if you intend to use Browser Use Cloud from Go and trust the unofficial github.com/psyb0t/go-browser-use module. Treat Browser Use tasks, files, profiles, integrations, and session deletion or purge actions as account-impacting operations, and provide an API key only through your environment or secret store.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
80% confidence
Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/setup.md (reported line 42)May include surrounding context.

md
| `ListSessionsSessionsGetWithResponse` | `GET /sessions` |
| `GetSessionSessionsSessionIdGetWithResponse` | `GET /sessions/{session_id}` |
| `UpdateSessionSessionsSessionIdPatchWithResponse` | `PATCH /sessions/{session_id}` |
| `DeleteSessionSessionsSessionIdDeleteWithResponse` | `DELETE /sessions/{session_id}` |
| `PurgeSessionSessionsSessionIdPurgePostWithResponse` | `POST /sessions/{session_id}/purge` |
| `QueueSessionMessageSessionsSessionIdQueuePostWithResponse` | `POST /sessions/{session_id}/queue` |
| `ListSessionQueueSessionsSessionIdQueueGetWithResponse` | `GET /sessions/{session_id}/queue` |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 26)May include surrounding context.

md
## Base URL and auth

Use `https://api.browser-use.com/api/v4`. Paths below are relative to this URL. The spec's `APIKeyHeader` scheme uses the `X-Browser-Use-API-Key` header. Set it in `browseruse.WithRequestEditorFn` with `req.Header.Set("X-Browser-Use-API-Key", key)`. Read the full compilable example in the root README or `example_test.go`.

## Client

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/setup.md (reported line 18)May include surrounding context.

md
## Base URL and auth

Use `https://api.browser-use.com/api/v4`. Paths below are relative to this URL. The spec's `APIKeyHeader` scheme uses the `X-Browser-Use-API-Key` header. Set it in `browseruse.WithRequestEditorFn` with `req.Header.Set("X-Browser-Use-API-Key", key)`. Read the full compilable example in the root README or `example_test.go`.

## Client

Static analysis

No suspicious patterns detected.