Description-Behavior Mismatch
Medium
- Confidence
- 98% confidence
- Finding
- The description omits that the tool can execute arbitrary JavaScript and intercept or mock network traffic, which are materially broader powers than ordinary browser automation. Hidden powerful capabilities make misuse easier because operators and automated allowlisting logic may not realize the skill can alter page behavior or inspect/modify requests.
