Scan Report
0 /100
Agent Browser
A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured commands.
This skill is a pure documentation wrapper around the public agent-browser CLI with no code/scripts — only SKILL.md and CONTRIBUTING.md present.
Safe to install
No action needed. The skill is safe to use as it contains no executable code.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No filesystem access declared or used |
| Network | READ | READ | ✓ Aligned | Allowed via browser automation (open, network, screenshot) |
| Shell | WRITE | WRITE | ✓ Aligned | Bash(agent-browser:*) only — scoped to browser CLI invocation |
| Environment | NONE | NONE | — | No env var access in skill |
| Skill Invoke | NONE | NONE | — | No nested skill invocation |
| Clipboard | NONE | NONE | — | No clipboard access documented or coded |
| Browser | READ | READ | ✓ Aligned | Core capability — navigate, snapshot, interact, screenshot |
| Database | NONE | NONE | — | No database access |
3 findings
Medium External URL 外部 URL
https://app.example.com/login SKILL.md:257 Medium External URL 外部 URL
https://app.example.com/dashboard SKILL.md:267 Info Email 邮箱地址
[email protected] SKILL.md:162 File Tree
3 files · 11.7 KB · 396 lines Markdown 2f · 391L
JSON 1f · 5L
├─
_meta.json
JSON
├─
CONTRIBUTING.md
Markdown
└─
SKILL.md
Markdown
Security Positives
✓ No executable code present — pure documentation wrapper
✓ References real, public open-source repositories (vercel-labs/agent-browser)
✓ allowed-tools scoped narrowly to Bash(agent-browser:*) only
✓ No credential harvesting, environment scanning, or sensitive file access
✓ No obfuscation, base64 payloads, or hidden instructions
✓ No supply chain risk — no dependencies or package files