Security audit
Security checks for vulnerabilities and agentic risk
This browser automation skill is coherent but broad enough to merit review because it can act through browser sessions and transfer files with very generic triggers.
Install only if you want a general browser-control helper. Use it deliberately, avoid connecting it to your personal Chrome profile unless needed, confirm uploads/downloads and destinations, and do not share screenshots or snapshots from logged-in sessions unless you have checked them for sensitive data.
The trigger set includes generic terms like '浏览器', '浏览网页', and 'browser', which are likely to match ordinary user requests and invoke this skill unintentionally. Because the skill can open pages, click, type, upload, download, and manipulate browser state, accidental activation expands the chance of unintended web actions and exposure of session-linked data.
The skill advertises file upload and download capabilities but does not prominently warn that these actions can move local data to remote sites or persist remote content locally. In a browser-automation context, this increases the risk of accidental data exfiltration, ingestion of untrusted files, or misuse of authenticated browser sessions.
The trigger '截图' is extremely short and common, so routine requests for screenshots could invoke this powerful browser-control skill without the user intending to grant web automation capabilities. Even though the trigger itself is not harmful, unintended invocation can become a gateway to broader browser actions in the same skill.
