Security audit
Security checks for vulnerabilities and agentic risk
The skill has legitimate browser-session management features, but it needs review because it can persist logged-in sessions, run Docker session commands, send webhook data, start long-running monitors, and advertises Cloudflare avoidance with overly broad activation text.
Install only if you intend to run authorized browser-session automation. Before use, restrict it to sites and sessions you control or have permission to automate, use dedicated webhook endpoints, avoid putting secrets in saved config or generated scripts, review ~/.bsession/workspace for retained files, and disable recurring monitors or automatic restarts unless you explicitly need them.
def _send_generic(self, url, title, content):
"""通用Webhook"""
payload = {"title": title, "content": content, "timestamp": str(time.time())}
r = requests.post(url, json=payload, timeout=10)
return r.status_code == 200
notifier = WebhookNotifier()import requests
payload = {"text": message, "session": self.name}
try:
requests.post(self.webhook_url, json=payload, timeout=10)
print(f"[{self.name}] Webhook已发送")
except Exception as e:
print(f"[{self.name}] Webhook失败：{e}")def check_health(self, session_name):
"""检查会话健康状态"""
try:
result = subprocess.run(
["docker", "exec", "agent-browser", "bsession", "show", session_name],
capture_output=True, text=True, timeout=10
)"""重启会话"""
print(f"尝试重启会话：{name}")
try:
subprocess.run(
["docker", "exec", "agent-browser", "bsession", "restart", name],
capture_output=True, text=True, timeout=30
)port = int(os.environ.get("CDP_PORT", 9222))
ab(port, "open", "https://shop.example.com/product/123")
time.sleep(5)
snap = ab(port, "snapshot")
price_ref = find_ref(snap, "价格")
if price_ref:
price_text = find_ref(snap, "价格", extract=True)No suspicious patterns detected.