Security audit

Cdp Browser Pilot Free

Security checks across malware telemetry and agentic risk

Overview

This skill is for logged-in browser automation and is not malicious, but it gives an agent broad control over authenticated browser sessions without enough safety boundaries.

Install only if you are comfortable letting an agent control a browser session that may already be logged in. Use a separate browser profile and low-privilege accounts, avoid sensitive sites, do not expose remote debugging on a profile with important accounts, and review any screenshots, exports, cookie handling, or scheduled monitoring before running tasks.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The skill encourages connecting to an already logged-in browser via CDP but does not clearly warn that the agent will inherit the user's authenticated session and can access or act on sensitive accounts. In this context, that omission is dangerous because CDP provides broad control over browser state, page content, and user data visible to the session.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The instructions tell users to force-kill all Edge processes before relaunching with remote debugging, without warning about loss of unsaved form data, interrupted sessions, or terminating unrelated browsing activity. While not an exploit by itself, this can cause avoidable disruption and may terminate security-sensitive workflows unexpectedly.

Missing User Warnings

Low

Confidence: 84% confidence
Finding: The screenshot example writes captured page data to a local file without warning that screenshots may contain credentials, personal data, tokens, or other sensitive information from authenticated pages. In a skill built around logged-in browser automation, silent local persistence increases privacy and data-handling risk.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.