browser
Drives a real browser through the omowright library from the js eval kernel: sites the user is already signed into, forms and clicks, JS-rendered pages, screenshots, web QA, extension popups, a human handoff for login, CAPTCHA or OTP, and a browser you own for scraping, bot-scored targets, network capture and QA traces. Use for any interactive browser task; not for a plain search or an unblocked static fetch.
75
94%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Medium
Suggest reviewing before use
W009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill operates a browser automation library (`omowright`) capable of interacting with web pages, including pages where actions like paying, ordering, and subscribing can occur through the user's browser. This represents a direct financial/purchasing capability via browser automation. However, the documented guard mechanism explicitly intercepts operations ("before a click, Enter or script that sends, posts, pays, orders, subscribes, deletes or closes an account... it asks the user first") and enforces user authorization, which constitutes an independent external approval / access control mechanism for direct operations. Therefore, the risk level is medium.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The browser skill drives web pages via browser automation tools and captures content from arbitrary websites visited during runtime.
- Repository
code-yeongyu/oh-my-openagent
- Revision
c00a058
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.