browser-automation
统一自动化入口。覆盖浏览器自动化（Playwright）和 Windows 桌面应用自动化（OpenReverse）。 浏览器场景：打开网页、点击、填表、爬取、截图、自动化登录、渗透页面交互。 桌面场景：操作 IDA/x64dbg 等 GUI 工具、Windows UI Automation、视觉驱动交互、桌面应用网络抓包。 触发关键词：浏览器自动化、桌面自动化、打开网页、填表、爬取、截图、自动化登录、Playwright、agent-browser、headless、OpenReverse、UIA、CUA、桌面操作、Windows 自动化。
70
85%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Critical
Do not install without reviewing
Security
2 findings: 2 critical severity. Installing this skill is not recommended: please review these findings carefully if you do intend to do so.
E005: Suspicious download URL detected in skill instructions.
What this means
Detected a suspicious URL in the skill instructions that could lead the agent to download and execute malicious scripts or binaries. This includes links to executables from untrusted sources, typosquatting of official packages, URL shorteners that obscure the destination, and personal file hosting services.
Why it was flagged
These URLs point to a GitHub repository (openreverse) hosted under an individual/unknown username (zhexulong) referenced multiple times for cloning/installing tooling — GitHub repos from unknown accounts used to distribute runnable tooling are a common vector for untrusted executables and warrant caution.
E006: Malicious code pattern detected in skill scripts.
What this means
Detected high-risk code patterns in the skill content — including its prompts, tool definitions, and resources — such as data exfiltration, backdoors, remote code execution, credential theft, system compromise, supply chain attacks, and obfuscation techniques.
Why it was flagged
High-risk: the skill content includes explicit, intentional instructions and code examples to inject XSS/payloads, intercept and modify network traffic (including escalating roles), and extract cookies/localStorage—behaviors that enable credential theft and unauthorized access.
Low
Low-risk findings.
2 low severity findings. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md 规定“浏览器场景”会通过 `agent-browser open <url>` 在运行时打开由用户任务提供的外部网页并对页面进行 snapshot/文本提取（如后续通常会把页面无障碍树/可交互元素文本喂回LLM上下文），属于“公共网页内容在运行时被读取”的外部来源经由 agent-browser 的页面读取/快照链路进入模型。
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The skill explicitly instructs cloning and installing OpenReverse from https://github.com/zhexulong/openreverse.git (and references https://github.com/zhexulong/openreverse), which at runtime fetches remote code and runs installation scripts (npm install / npm run), making it a required external dependency that can execute remote code.
- Repository
- zhaoxuya520/reverse-skill
- Commit
6aa1362
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.