Bb Browser Sites

• Analyzed: May 11, 2026, 6:40 AM
• Findings: 1
• Version: 0.1.0
• Hash: d477ee834db0f5bbd08d3fe66cbcfd8ab7254c19aa7ed1f5b68e28ae3e9063b8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a CLI interface (`bb-browser`) to extract data from 36+ platforms using the user's authenticated browser sessions. It is classified as suspicious primarily due to the `bb-browser site update` command, which fetches and installs external 'community adapters,' creating a potential supply-chain risk for remote code execution. Additionally, the instructions in SKILL.md encourage the agent to reverse-engineer APIs and automate PR submissions, which are high-risk activities that could lead to unauthorized data access or unintended side effects.