Back to skill

Security audit

Camoufox Browse

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed, documentation-only skill for user-directed anti-detection browser automation, with clear safety limits but meaningful dual-use risk.

Install only if you have a legitimate need for anti-detection browser automation and are authorized to automate the target site. Treat saved session files, cookies, proxy credentials, screenshots, and form submissions as sensitive, use disposable accounts or profiles where possible, and require explicit human approval before bulk or irreversible actions.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.