スキル agent-browser
📦
agent-browser
コンテンツリビジョン r1 高リスク ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス
Agent Refsでブラウザーワークフローを自動化
手動のブラウザーテストや調査は、ページでクリック、フォーム入力、スクリーンショットが必要になるとエージェントの作業を遅くします。このスキルは、Claude、Codex、Claude Codeに、belt、element refs、snapshots、capture toolsを通じて再現可能なブラウザー制御を提供します。
対応: Claude Codex Code(CC)
インストール前に停止して確認を求めてください。
計画を確認し、ファイルを変更する前にユーザーの明示的な同意を得てください。
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "agent-browser" from https://skillstore.io/skills/halt-catch-fire-agent-browser.md and its manifest at https://skillstore.io/api/skills/halt-catch-fire-agent-browser/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「agent-browser」を使用しています。 公開価格ページをレビューし、証跡をキャプチャする。
期待される結果:
ページが開かれ、主要なナビゲーション要素が一覧化され、フルページスクリーンショットがキャプチャされ、表示されている価格テキストが要約されました。
「agent-browser」を使用しています。 提供されたサンプルデータを使用して問い合わせフォームをテストする。
期待される結果:
スナップショットからフォームフィールドが特定され、承認済みの値が入力され、送信され、最終ページのメッセージに対して検証されました。
「agent-browser」を使用しています。 文書化用に短いブラウザーワークフローを録画する。
期待される結果:
ブラウザーセッションがカーソル表示付きで録画され、主要な手順が完了し、セッション終了後に最終的な動画成果物が返されました。
セキュリティ監査
高リスクv3 • 2026/7/6 バージョン別レポートを開く
Most static findings are Markdown examples, documentation links, or benign shell redirection, and those were marked as false positives. Confirmed risk remains high because the skill enables remote browser automation, screenshots, video recording, authenticated data extraction, arbitrary page JavaScript, file upload, and proxy routing. I found no prompt-injection language in the reviewed skill files.
9
スキャンされたファイル
2,110
解析済み行数
56
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (6)
高
Screen capture upload
description: "Browser automation for AI agents via inference.sh. Navigate web pages, interact with e
The skill advertises screenshots, video recording, file upload, and remote browser automation through inference.sh. These capabilities can capture and transmit sensitive page data if used on private sessions.
高
Remote Browser Capture Can Expose Sensitive Page Data
The skill uses inference.sh for browser automation and supports screenshots, videos, and file artifacts. Sensitive authenticated pages can be captured or returned through the remote service.
The front matter and video documentation directly state remote browser automation and full-session recording. The authentication guide also warns that video may capture sensitive information.
高
Authenticated Cookie Extraction Guidance
The authentication guide includes a cookie extraction section that reads document cookies and prints them. This can expose session tokens or authentication state to logs or agent output.
The section title and commands clearly describe cookie extraction from an authenticated session. Cookies are sensitive credentials even when the example is instructional.
高
references/proxy-support.md:85-128references/proxy-support.md:145-153references/proxy-support.md:280-286
Proxy Guidance Encourages Rate-Limit Avoidance And Anonymity
The proxy guide includes sections for rate limit avoidance, proxy rotation, and privacy-focused proxy routing. This can enable scraping abuse or evasion of site access controls.
The guide explicitly names rate limit avoidance and privacy proxy use. It later mentions respecting rate limits, but the evasion workflow is still present.
高
Arbitrary In-Page JavaScript Execution
The skill exposes an execute function that runs custom JavaScript in the page context. This can extract DOM data, links, cookies, or other page state from sensitive sessions.
The command reference documents a general execute function and examples for extracting page text, links, and style data. This is intentional functionality with sensitive-data implications.
中
Local File Upload Capability Can Disclose Files
The interact action supports uploading local file paths to page file inputs. Without strict user approval, this can disclose local documents to arbitrary target sites.
The action table and file upload section explicitly support upload with file_paths. The risk depends on user intent, so confidence is high but not absolute.
機能レビュー項目 (56)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
高
Shell command substitution
RESULT=$(belt app run agent-browser --function execute --session $SESSION --input '{
The authentication guide shows extracting or printing cookie/session data from an authenticated browser session. Session cookies are sensitive credentials and should not be exposed in agent output or logs.
高
Shell command substitution
COOKIES=$(echo $RESULT | jq -r '.result')
The authentication guide shows extracting or printing cookie/session data from an authenticated browser session. Session cookies are sensitive credentials and should not be exposed in agent output or logs.
高
Shell command substitution
RESULT=$(belt app run agent-browser --function execute --session $SESSION --input '{
The authentication guide shows extracting or printing cookie/session data from an authenticated browser session. Session cookies are sensitive credentials and should not be exposed in agent output or logs.
高
Shell command substitution
SESSION=$(belt app run agent-browser --function open --session new --input '{
This proxy workflow appears in sections for rate-limit avoidance or privacy routing. The intent can support abuse by rotating or anonymizing automated browser traffic.
高
SOCKS proxy
"proxy_url": "socks5://privacy-proxy.example.com:1080"
The documentation explicitly supports SOCKS proxy routing. This can be legitimate, but it also enables anonymized traffic and bypass of normal network controls.
高
SOCKS proxy
### SOCKS5 Proxy
The documentation explicitly supports SOCKS proxy routing. This can be legitimate, but it also enables anonymized traffic and bypass of normal network controls.
高
SOCKS proxy
{"proxy_url": "socks5://proxy.example.com:1080"}
The documentation explicitly supports SOCKS proxy routing. This can be legitimate, but it also enables anonymized traffic and bypass of normal network controls.
中
Shell command substitution
TOTP_CODE=$(oathtool --totp -b "$TOTP_SECRET")
The authentication workflow touches MFA or recorded login state. This is a legitimate automation example, but mishandling it can expose authentication factors or sensitive prompts.
中
Shell command substitution
SESSION=$(belt app run agent-browser --function open --session new --input '{
The authentication workflow touches MFA or recorded login state. This is a legitimate automation example, but mishandling it can expose authentication factors or sensitive prompts.
中
Shell command substitution
PROXY_INDEX=$((i % ${#PROXIES[@]}))
This proxy workflow appears in sections for rate-limit avoidance or privacy routing. The intent can support abuse by rotating or anonymizing automated browser traffic.
中
Shell command substitution
echo "Fetching $URL via proxy $((PROXY_INDEX + 1))"
This proxy workflow appears in sections for rate-limit avoidance or privacy routing. The intent can support abuse by rotating or anonymizing automated browser traffic.
中
Shell command substitution
SESSION=$(belt app run agent-browser --function open --session new --input '{
This proxy workflow appears in sections for rate-limit avoidance or privacy routing. The intent can support abuse by rotating or anonymizing automated browser traffic.
中
Shell command substitution
RESULT=$(belt app run agent-browser --function execute --session $SESSION --input '{
This proxy workflow appears in sections for rate-limit avoidance or privacy routing. The intent can support abuse by rotating or anonymizing automated browser traffic.
中
Unix shell invocation
#!/bin/bash
This proxy workflow appears in sections for rate-limit avoidance or privacy routing. The intent can support abuse by rotating or anonymizing automated browser traffic.
中
Shell command substitution
SESSION=$(belt app run agent-browser --function open --session new --input '{
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
RESULT=$(belt app run agent-browser --function close --session $SESSION --input '{}')
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
VIDEO=$(echo $RESULT | jq -r '.video')
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
SESSION=$(belt app run agent-browser --function open --session new --input '{
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
SESSION=$(belt app run agent-browser --function open --session new --input '{
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
CLOSE_RESULT=$(belt app run agent-browser --function close --session $SESSION --input '{}')
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
echo "Debug video: $(echo $CLOSE_RESULT | jq -r '.video')"
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
SESSION=$(belt app run agent-browser --function open --session new --input '{
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
RESULT=$(belt app run agent-browser --function close --session $SESSION --input '{}')
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
echo "Documentation video: $(echo $RESULT | jq -r '.video')"
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
SESSION=$(belt app run agent-browser --function open --session new --input '{
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
CLOSE_RESULT=$(belt app run agent-browser --function close --session $SESSION --input '{}')
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
VIDEO=$(echo $CLOSE_RESULT | jq -r '.video')
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
SESSION=$(belt app run agent-browser --function open --session new --input '{
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
RESULT=$(belt app run agent-browser --function close --session $SESSION --input '{}')
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
VIDEO=$(echo $RESULT | jq -r '.video')
The video workflow records browser activity and returns video artifacts. Recording is useful for debugging, but it can leak credentials or private page content if enabled on sensitive sessions.
中
Shell command substitution
RESULT=$(belt app run agent-browser --function open --session new --input '{
The example runs the external browser service and captures session output. It is core functionality, but it creates a remote browsing and capture surface that needs user approval.
中
Shell command substitution
SESSION=$(belt app run agent-browser --function open --session new --input '{
The example runs the external browser service and captures session output. It is core functionality, but it creates a remote browsing and capture surface that needs user approval.
中
Shell command substitution
SESSION=$(belt app run agent-browser --function open --session new --input '{
The example runs the external browser service and captures session output. It is core functionality, but it creates a remote browsing and capture surface that needs user approval.
中
Shell command substitution
RESULT=$(belt app run agent-browser --function close --session $SESSION --input '{}')
The example runs the external browser service and captures session output. It is core functionality, but it creates a remote browsing and capture surface that needs user approval.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function open --session new --input '{
This runnable template executes the external infsh browser app against user-supplied pages or sessions. It is intended functionality, but it can send page content and capture artifacts to a remote service.
中
Unix shell invocation
#!/bin/bash
This file is an executable shell template that drives the remote browser CLI. Runnable automation scripts increase review requirements because they can browse, capture, and write artifacts.
中
Shell command substitution
CLOSE_RESULT=$(infsh app run agent-browser --function close --session $SESSION_ID --input '{}' 2>/de
This runnable template executes the external infsh browser app against user-supplied pages or sessions. It is intended functionality, but it can send page content and capture artifacts to a remote service.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function open --session new --input '{
This runnable template executes the external infsh browser app against user-supplied pages or sessions. It is intended functionality, but it can send page content and capture artifacts to a remote service.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function snapshot --session $SESSION_ID --input '{}')
This runnable template executes the external infsh browser app against user-supplied pages or sessions. It is intended functionality, but it can send page content and capture artifacts to a remote service.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function execute --session $SESSION_ID --input '{
This runnable template executes the external infsh browser app against user-supplied pages or sessions. It is intended functionality, but it can send page content and capture artifacts to a remote service.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function execute --session $SESSION_ID --input '{
This runnable template executes the external infsh browser app against user-supplied pages or sessions. It is intended functionality, but it can send page content and capture artifacts to a remote service.
中
Unix shell invocation
#!/bin/bash
This file is an executable shell template that drives the remote browser CLI. Runnable automation scripts increase review requirements because they can browse, capture, and write artifacts.
中
Standard device file access
CLOSE_RESULT=$(infsh app run agent-browser --function close --session $SESSION_ID --input '{}' 2>/de
This runnable template executes the external infsh browser app against user-supplied pages or sessions. It is intended functionality, but it can send page content and capture artifacts to a remote service.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function open --session new --input '{
This runnable template executes the external infsh browser app against user-supplied pages or sessions. It is intended functionality, but it can send page content and capture artifacts to a remote service.
中
Unix shell invocation
#!/bin/bash
This file is an executable shell template that drives the remote browser CLI. Runnable automation scripts increase review requirements because they can browse, capture, and write artifacts.
低
Hardcoded URL
"http://proxy1.example.com:8080"
The URL is a placeholder, but it appears inside proxy rotation or anonymity examples. The surrounding workflow is risky even though the hardcoded URL itself is not live malicious infrastructure.
低
Hardcoded URL
"http://proxy2.example.com:8080"
The URL is a placeholder, but it appears inside proxy rotation or anonymity examples. The surrounding workflow is risky even though the hardcoded URL itself is not live malicious infrastructure.
低
Hardcoded URL
"http://proxy3.example.com:8080"
The URL is a placeholder, but it appears inside proxy rotation or anonymity examples. The surrounding workflow is risky even though the hardcoded URL itself is not live malicious infrastructure.
低
Hardcoded URL
"https://site.com/page1"
The URL is a placeholder, but it appears inside proxy rotation or anonymity examples. The surrounding workflow is risky even though the hardcoded URL itself is not live malicious infrastructure.
低
Hardcoded URL
"https://site.com/page2"
The URL is a placeholder, but it appears inside proxy rotation or anonymity examples. The surrounding workflow is risky even though the hardcoded URL itself is not live malicious infrastructure.
低
Hardcoded URL
"https://site.com/page3"
The URL is a placeholder, but it appears inside proxy rotation or anonymity examples. The surrounding workflow is risky even though the hardcoded URL itself is not live malicious infrastructure.
低
Hardcoded URL
"url": "https://whatismyip.com",
The URL is a placeholder, but it appears inside proxy rotation or anonymity examples. The surrounding workflow is risky even though the hardcoded URL itself is not live malicious infrastructure.
低
Hardcoded URL
Browser automation for AI agents via [inference.sh](https://inference.sh). Uses Playwright under the
The URL documents a real external dependency for the skill and its installation flow. This is not malicious by itself, but it confirms network reliance on third-party services.
低
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
The URL documents a real external dependency for the skill and its installation flow. This is not malicious by itself, but it confirms network reliance on third-party services.
低
Hardcoded URL
- [inference.sh Sessions](https://inference.sh/docs/extend/sessions) - Session management
The URL documents a real external dependency for the skill and its installation flow. This is not malicious by itself, but it confirms network reliance on third-party services.
低
Hardcoded URL
- [Multi-function Apps](https://inference.sh/docs/extend/multi-function-apps) - How functions work
The URL documents a real external dependency for the skill and its installation flow. This is not malicious by itself, but it confirms network reliance on third-party services.
リスク要因
⚙️ 外部コマンド (164)
references/authentication.md:24-26 references/authentication.md:51 references/authentication.md:52 references/authentication.md:70-72 references/authentication.md:80 references/authentication.md:97 references/authentication.md:115 references/authentication.md:116 references/authentication.md:128 references/authentication.md:129 references/authentication.md:133 references/authentication.md:153-156 references/authentication.md:179-181 references/authentication.md:202 references/authentication.md:215-217 references/authentication.md:218 references/authentication.md:222-223 references/authentication.md:243 references/authentication.md:246 references/authentication.md:285 references/authentication.md:292 references/authentication.md:21 references/authentication.md:68 references/authentication.md:174 references/proxy-support.md:22-25 references/proxy-support.md:35-40 references/proxy-support.md:65-68 references/proxy-support.md:76 references/proxy-support.md:107 references/proxy-support.md:111 references/proxy-support.md:113-116 references/proxy-support.md:119-121 references/proxy-support.md:137-142 references/proxy-support.md:150-153 references/proxy-support.md:186-189 references/proxy-support.md:192-194 references/proxy-support.md:195 references/proxy-support.md:267-270 references/proxy-support.md:273 references/proxy-support.md:294 references/proxy-support.md:50 references/proxy-support.md:90 references/snapshot-refs.md:124-126 references/snapshot-refs.md:136-138 references/snapshot-refs.md:140 references/snapshot-refs.md:142 references/video-recording.md:23-26 references/video-recording.md:38 references/video-recording.md:39 references/video-recording.md:48-52 references/video-recording.md:87-90 references/video-recording.md:93-95 references/video-recording.md:97 references/video-recording.md:100 references/video-recording.md:103 references/video-recording.md:104 references/video-recording.md:119-124 references/video-recording.md:156 references/video-recording.md:157 references/video-recording.md:168-171 references/video-recording.md:178 references/video-recording.md:179 references/video-recording.md:195 references/video-recording.md:197-200 references/video-recording.md:206 references/video-recording.md:207 references/video-recording.md:84 references/video-recording.md:116 references/video-recording.md:163 references/video-recording.md:192 SKILL.md:7 SKILL.md:11 SKILL.md:17 SKILL.md:19-24 SKILL.md:24-31 SKILL.md:31-36 SKILL.md:36-60 SKILL.md:60-66 SKILL.md:66-67 SKILL.md:67 SKILL.md:68 SKILL.md:69-70 SKILL.md:70-71 SKILL.md:71-77 SKILL.md:77 SKILL.md:78 SKILL.md:79 SKILL.md:80 SKILL.md:81 SKILL.md:82 SKILL.md:83 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:87 SKILL.md:88 SKILL.md:89-90 SKILL.md:90 SKILL.md:91 SKILL.md:95-97 SKILL.md:97-103 SKILL.md:103-116 SKILL.md:116-129 SKILL.md:129-135 SKILL.md:135-141 SKILL.md:141-149 SKILL.md:149-156 SKILL.md:156-162 SKILL.md:162-168 SKILL.md:168-174 SKILL.md:174-180 SKILL.md:180-186 SKILL.md:186-191 SKILL.md:191-216 SKILL.md:216-230 SKILL.md:230-234 SKILL.md:234-245 SKILL.md:245-249 SKILL.md:249-263 SKILL.md:263-269 SKILL.md:269-270 SKILL.md:270-275 SKILL.md:275-281 SKILL.md:38-40 SKILL.md:41 SKILL.md:118-122 SKILL.md:217-219 SKILL.md:235-237 SKILL.md:250-253 SKILL.md:261 SKILL.md:36-60 SKILL.md:116-129 SKILL.md:216-230 SKILL.md:234-245 SKILL.md:249-263 templates/authenticated-session.sh:40-42 templates/authenticated-session.sh:43 templates/authenticated-session.sh:70-73 templates/authenticated-session.sh:74 templates/authenticated-session.sh:97 templates/authenticated-session.sh:98 templates/authenticated-session.sh:127-128 templates/authenticated-session.sh:130 templates/authenticated-session.sh:1 templates/capture-workflow.sh:28 templates/capture-workflow.sh:31 templates/capture-workflow.sh:54-59 templates/capture-workflow.sh:60 templates/capture-workflow.sh:63 templates/capture-workflow.sh:64 templates/capture-workflow.sh:86 templates/capture-workflow.sh:105-107 templates/capture-workflow.sh:114-115 templates/capture-workflow.sh:126-127 templates/capture-workflow.sh:132-133 templates/capture-workflow.sh:138-139 templates/capture-workflow.sh:1 templates/form-automation.sh:30-32 templates/form-automation.sh:33 templates/form-automation.sh:102 templates/form-automation.sh:104 templates/form-automation.sh:105 templates/form-automation.sh:110 templates/form-automation.sh:1
🌐 ネットワークアクセス (54)
references/authentication.md:25 references/authentication.md:71 references/authentication.md:154 references/authentication.md:180 references/authentication.md:194 references/commands.md:25 references/commands.md:56 references/proxy-support.md:23 references/proxy-support.md:24 references/proxy-support.md:36 references/proxy-support.md:37 references/proxy-support.md:54 references/proxy-support.md:55 references/proxy-support.md:56 references/proxy-support.md:66 references/proxy-support.md:94 references/proxy-support.md:95 references/proxy-support.md:96 references/proxy-support.md:100 references/proxy-support.md:101 references/proxy-support.md:102 references/proxy-support.md:138 references/proxy-support.md:139 references/proxy-support.md:151 references/proxy-support.md:161 references/proxy-support.md:162 references/proxy-support.md:175 references/proxy-support.md:187 references/proxy-support.md:188 references/proxy-support.md:252 references/proxy-support.md:259 references/proxy-support.md:152 references/proxy-support.md:165 references/proxy-support.md:168 references/video-recording.md:24 references/video-recording.md:49 references/video-recording.md:88 references/video-recording.md:120 references/video-recording.md:198 SKILL.md:11 SKILL.md:13 SKILL.md:17 SKILL.md:23 SKILL.md:39 SKILL.md:119 SKILL.md:137 SKILL.md:151 SKILL.md:152 SKILL.md:218 SKILL.md:236 SKILL.md:251 SKILL.md:285 SKILL.md:286 templates/authenticated-session.sh:118
📁 ファイルシステムへのアクセス (15)
references/authentication.md:5 references/authentication.md:263 references/commands.md:3 references/commands.md:59 references/proxy-support.md:5 references/proxy-support.md:272 references/snapshot-refs.md:5 references/video-recording.md:5 references/video-recording.md:239 templates/authenticated-session.sh:30 templates/capture-workflow.sh:28 templates/capture-workflow.sh:78 templates/capture-workflow.sh:81 templates/capture-workflow.sh:149 templates/form-automation.sh:23
検出されたパターン
Screen capture upload
監査者: codex 監査履歴を表示 →
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/halt-catch-fire-agent-browser/audits/3?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/halt-catch-fire-agent-browser?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/halt-catch-fire-agent-browser?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/halt-catch-fire-agent-browser/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/halt-catch-fire-agent-browser.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
halt-catch-fire. (2026). agent-browser security audit report (audit version 3) [Author version unspecified]. Skillstore. https://skillstore.io/skills/halt-catch-fire-agent-browser/audits/3BibTeX形式の引用
@techreport{halt-catch-fire-halt-catch-fire-agent-browser-2026,
author = {halt-catch-fire},
title = {agent-browser security audit report (audit version 3)},
institution = {Skillstore},
year = {2026},
number = {3},
url = {https://skillstore.io/skills/halt-catch-fire-agent-browser/audits/3},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "agent-browser security audit report (audit version 3)"
version: "unspecified"
type: report
authors:
- name: "halt-catch-fire"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/halt-catch-fire-agent-browser/audits/3"
identifiers:
- type: other
value: "skillstore:halt-catch-fire-agent-browser:audit:3"
description: "Skillstore immutable audit report identifier"
バリアントを比較
インストール可能なバリアント 19 件各作者のスキルは個別のインストール項目として維持されます。推奨バリアントは Skillstore の証拠で順位付けされます。
このバリアントが首位の理由
Skillstore スコアが最高
作者 / ソース Skillstore スコア 証拠の信頼度 Skillstore 利用状況 更新済み
supercent-io 推奨
supercent-io-agent-browser
Skillstore スコア 78
証拠の信頼度 高
Skillstore 利用状況 53
更新済み
2026-09-09
inference-sh-8-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 32
更新済み
2026-09-09
inference-sh-9-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 21
更新済み
2026-09-09
infsh-skills-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 18
更新済み
2026-09-09
inference-sh-skills-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 16
更新済み
2026-09-09
inference-sh-0-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 16
更新済み
2026-09-09
inference-shell-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 15
更新済み
2026-09-09
inference-skills-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 14
更新済み
2026-09-09
halt-catch-fire-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 8
更新済み
2026-09-09
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 45
アーキテクチャ
85
保守性
87
コンテンツ
67
コミュニティ
83
仕様準拠
作成できるもの
インタラクティブなウェブフローをテスト
ログイン、フォーム、ナビゲーションのフローを実行しながら、スクリーンショットや動画証跡をキャプチャする。
ウェブページの証跡を収集
ページを開き、表示テキストとリンクを抽出し、レビュー用にスクリーンショットを保存する。
ブラウザーワークフローを文書化
サポート資料やトレーニング資料向けに、カーソル表示付きで再現可能なブラウザー操作を記録する。
これらのプロンプトを試す
ページを開いて検査
対象ページを開き、タイトルと表示されているインタラクティブ要素を要約してから、ブラウザーセッションを閉じてください。
シンプルなフォームに入力
最新のスナップショットを使用してフォームフィールドを特定し、提供された値を入力し、フォームを送信して、結果を報告してください。
調査証跡をキャプチャ
承認済みの各URLを開き、フルページスクリーンショットをキャプチャし、表示テキストとリンクを抽出して、保存された成果物を一覧表示してください。
認証済みワークフローを自動化
提供された認証情報と同意済みの対象サイトを使用してログインし、各ナビゲーション後に再スナップショットを取得し、タスクを完了して、機密ページの録画を避けてください。
ベストプラクティス
- 承認済みの対象URLのみを使用し、タスク後はすべてのブラウザーセッションを閉じる。
- ナビゲーション、フォーム送信、モーダル変更、動的ページ更新の後には再スナップショットを取得する。
- 認証情報や機密データが表示されている場合は、録画とスクリーンショットを無効にする。
回避
- レート制限やサイトアクセス制御を回避するためにプロキシローテーションを使用しない。
- Cookie、パスワード、TOTPコード、セッショントークンをログに出力しない。
- 対象サイトとファイル内容が明示的に承認されていない限り、ローカルファイルをアップロードしない。
よくある質問
このスキルは何を使ってブラウザーを制御しますか？
Playwrightを基盤とするagent-browserアプリで、beltまたはinference.sh CLIを使用します。
ページ要素をクリックしたり入力したりできますか？
はい。クリック、入力、選択、ドラッグ、アップロード、キー入力に@e参照付きのスナップショット出力を使用します。
ブラウザー操作を録画できますか？
はい。セッション開始時に録画を有効にでき、セッション終了時に動画が返されます。
認証済みセッションに対応していますか？
はい。ドキュメントには、ログイン、OAuth、2FA、セッション再利用のパターンが含まれています。
ユーザーはどのようなデータリスクを理解すべきですか？
プライベートページで使用すると、スクリーンショット、動画、ページテキスト、Cookie、アップロードファイルによって機密情報が露出する可能性があります。
エージェントはこのスキルを自動インストールすべきですか？
いいえ。リモートブラウジング、キャプチャ、プロキシ、JavaScript実行、ファイルアップロードには、明示的なユーザー承認が必要です。
開発者情報
作成者
halt-catch-fireライセンス
MIT
Skillstore リビジョン
r1
バージョンに関する注意
作者はバージョンを宣言していません。
参照
a06681402992ceae98ba04d54cfd4ab004862696
メンテナンスの新しさ
2026/7/18
利用状況
2 ダウンロード · 0 閲覧