低风险 — 风险评分 5/100
上次扫描:22 小时前 重新扫描
5 /100
agent-browser-zc
A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured commands.
Documentation-only skill wrapping a legitimate browser automation CLI with no executable code or suspicious behavior.
技能名称agent-browser-zc
分析耗时26.8s
引擎pi
可以安装
This skill is safe to use. No security concerns identified. The skill merely provides documentation for the agent-browser CLI tool.
资源类型声明权限推断权限状态证据
文件系统 NONE NONE No filesystem access in skill
网络访问 NONE NONE No network calls made by skill
命令执行 WRITE WRITE ✓ 一致 Bash(agent-browser:*) declared - standard for CLI wrapper
环境变量 NONE NONE No environment variable access
技能调用 NONE NONE No skill invocation
剪贴板 NONE NONE No clipboard access
浏览器 NONE NONE Browser access is in the agent-browser CLI, not this wrapper
数据库 NONE NONE No database access
3 项发现
🔗
中危 外部 URL 外部 URL
https://app.example.com/login
SKILL.md:257
🔗
中危 外部 URL 外部 URL
https://app.example.com/dashboard
SKILL.md:267
📧
提示 邮箱 邮箱地址
[email protected]
SKILL.md:162

目录结构

3 文件 · 11.7 KB · 396 行
Markdown 2f · 391L JSON 1f · 5L
├─ 📋 _meta.json JSON 5L · 135 B
├─ 📝 CONTRIBUTING.md Markdown 63L · 1.6 KB
└─ 📝 SKILL.md Markdown 328L · 10.0 KB

安全亮点

✓ No executable code - documentation only
✓ No obfuscation or hidden functionality
✓ No credential harvesting
✓ No data exfiltration
✓ No base64 or encoded commands
✓ Clear and comprehensive documentation
✓ Standard npm installation with pinned version
✓ No suspicious URLs or IPs