スキル agent-browser
📦
agent-browser
コンテンツリビジョン r1 高リスク ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス
Agent Browserでブラウザワークフローを自動化
手動のWebテスト、データ収集、フォームワークフローは時間がかかり、再現も困難です。このスキルは、Claude、Codex、Claude Codeにinference.sh経由の構造化されたブラウザワークフローを提供します。
対応: Claude Codex Code(CC)
インストール前に停止して確認を求めてください。
計画を確認し、ファイルを変更する前にユーザーの明示的な同意を得てください。
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "agent-browser" from https://skillstore.io/skills/tul-sh-agent-browser.md and its manifest at https://skillstore.io/api/skills/tul-sh-agent-browser/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「agent-browser」を使用しています。 ステージングアプリのログインページを調査する。
期待される結果:
- ページは正常に開かれ、email、password、remember-me、submitの各コントロールが確認できました。
- サインイン後は要素参照が変わるため、新しいスナップショットが必要です。
- ユーザーがその操作を承認しなかったため、認証情報は入力されませんでした。
「agent-browser」を使用しています。 レビュー用に公開ドキュメントページを取得する。
期待される結果:
- ビューポートのスクリーンショットとページ全体のスクリーンショットを保存しました。
- 分析用に表示テキストとページリンクを抽出しました。
- 取得完了後にブラウザセッションを閉じました。
「agent-browser」を使用しています。 短い製品ワークフローを録画する。
期待される結果:
- 確認後、動画録画を有効にしてブラウザセッションを開始しました。
- 選択されたクリック操作と待機を完了しました。
- セッション終了時に動画アーティファクトを返しました。
セキュリティ監査
高リスクv4 • 2026/7/7 バージョン別レポートを開く
The skill is a legitimate browser automation wrapper, but it carries high-risk capabilities because it drives a third-party browser service through shell commands. Static path traversal, Markdown backticks, placeholder URLs, /dev/null redirection, and reconnaissance matches were mostly false positives, while screenshots, video, proxy routing, file upload, JavaScript execution, and authenticated-session handling are confirmed risks.
9
スキャンされたファイル
2,107
解析済み行数
60
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (6)
高
Screen capture upload
description: "Browser automation for AI agents via inference.sh. Navigate web pages, interact with e
The skill description advertises screenshots, video recording, JavaScript execution, and file upload. Those capabilities can capture or move sensitive page and local file data through the browser service.
高
Third-Party Browser Session Handles Sensitive Page Data
The skill grants Bash access to infsh and describes browser automation through inference.sh. Page snapshots, screenshots, and videos can pass through that external browser service.
The documentation directly states inference.sh usage and shows returned screenshots from open, screenshot, and execute functions. This confirms third-party handling of browser output.
高
references/authentication.md:31-38references/authentication.md:120-144references/authentication.md:209-224
Credential, 2FA, and Cookie Handling Workflows
Authentication guidance includes entering passwords, generating TOTP codes, reusing authenticated sessions, and extracting cookies. These workflows can expose account access if used without explicit consent and secure handling.
The cited sections explicitly automate password entry, TOTP generation, and cookie extraction. These are high-impact authentication materials, not generic browser actions.
高
Local File Upload Capability
The interact action supports uploading local file paths to web pages. An agent using this without careful approval could disclose local documents to a target site.
The documentation lists file_paths for upload and provides a file upload example. The capability is explicit and directly affects local file confidentiality.
高
Proxy Rotation for Rate Limit Avoidance
The proxy guide includes a section titled rate limit avoidance and shows rotating proxies while scraping pages. This creates business-logic abuse risk beyond basic proxy configuration.
The section title and example are explicit about proxy rotation for scraping. This is a clear intent-level abuse risk, not merely a hardcoded URL pattern.
高
Arbitrary JavaScript Execution in Page Context
The execute function runs custom JavaScript on the current page and returns results with screenshots. In authenticated sessions, this can read page content and session-accessible data.
The function is documented as running arbitrary JavaScript, and templates use it to extract page text and links. This confirms page-context code execution as an intended capability.
機能レビュー項目 (60)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
高
Shell command substitution
RESULT=$(infsh app run agent-browser --function execute --session $SESSION --input '{
This line runs JavaScript through the browser service inside an authenticated session. In this context it is used for cookie or session data extraction, which is sensitive.
高
Shell command substitution
COOKIES=$(echo $RESULT | jq -r '.result')
This line stores cookies extracted from browser JavaScript output. Handling session cookies is sensitive and can expose authenticated access if logged or reused.
高
Shell command substitution
RESULT=$(infsh app run agent-browser --function execute --session $SESSION --input '{
This line runs JavaScript through the browser service inside an authenticated session. In this context it is used for cookie or session data extraction, which is sensitive.
高
SOCKS proxy
"proxy_url": "socks5://privacy-proxy.example.com:1080"
The documentation explicitly supports SOCKS5 proxy routing for privacy and anonymity. This can bypass normal network attribution and monitoring, so the proxy capability is a real risk.
高
SOCKS proxy
### SOCKS5 Proxy
The documentation explicitly supports SOCKS5 proxy routing for privacy and anonymity. This can bypass normal network attribution and monitoring, so the proxy capability is a real risk.
高
SOCKS proxy
{"proxy_url": "socks5://proxy.example.com:1080"}
The documentation explicitly supports SOCKS5 proxy routing for privacy and anonymity. This can bypass normal network attribution and monitoring, so the proxy capability is a real risk.
高
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
高
Shell command substitution
RESULT=$(infsh app run agent-browser --function close --session $SESSION --input '{}')
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
高
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
高
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
高
Shell command substitution
RESULT=$(infsh app run agent-browser --function interact --session $SESSION --input '{
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
高
Shell command substitution
CLOSE_RESULT=$(infsh app run agent-browser --function close --session $SESSION --input '{}')
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
高
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
高
Shell command substitution
RESULT=$(infsh app run agent-browser --function close --session $SESSION --input '{}')
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
高
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
高
Shell command substitution
CLOSE_RESULT=$(infsh app run agent-browser --function close --session $SESSION --input '{}')
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
高
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
高
Shell command substitution
RESULT=$(infsh app run agent-browser --function close --session $SESSION --input '{}')
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
高
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
高
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
高
Shell command substitution
RESULT=$(infsh app run agent-browser --function close --session $SESSION --input '{}')
This line controls a browser session with video or screenshot capture in the surrounding workflow. The external command can return recordings or page images containing sensitive data.
中
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function snapshot --session $SESSION --input '{}')
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function snapshot --session $SESSION --input '{}')
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function snapshot --session $SESSION --input '{}')
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function snapshot --session $SESSION --input '{}')
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function snapshot --session $SESSION --input '{}')
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
TOTP_CODE=$(oathtool --totp -b "$TOTP_SECRET")
The command generates a TOTP code from a secret in a shell workflow. It handles authentication material and should require explicit user approval.
中
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
SESSION=$(login)
The command substitution runs a login helper that creates an authenticated browser session. That session can carry cookies and permissions into later automation.
中
Shell command substitution
export PASSWORD=$(cat /path/to/secure/password)
The command reads a local password file into an environment variable. Even as a best-practice example, it handles local secrets and can leak if logged or reused carelessly.
中
Shell command substitution
export PASSWORD=$(vault read -field=password secret/app)
The command reads a password from a secrets manager into the shell environment. This is legitimate secret handling but still a sensitive operation.
中
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function snapshot --session $SESSION --input '{}')
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function execute --session $SESSION --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function execute --session $SESSION --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function interact --session $SESSION --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function interact --session $SESSION --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
SESSION=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Unix shell invocation
#!/bin/bash
This is an executable shell template, not just documentation. Running it invokes the inference.sh CLI with user-provided URLs and browser sessions.
中
Shell command substitution
CLOSE_RESULT=$(infsh app run agent-browser --function close --session $SESSION_ID --input '{}' 2>/de
The executable template calls inference.sh to open pages, capture screenshots, or execute page JavaScript. It is useful but sends browser state and extracted content through an external service.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function open --session new --input '{
The executable template calls inference.sh to open pages, capture screenshots, or execute page JavaScript. It is useful but sends browser state and extracted content through an external service.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function snapshot --session $SESSION_ID --input '{}')
The executable template calls inference.sh to open pages, capture screenshots, or execute page JavaScript. It is useful but sends browser state and extracted content through an external service.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function execute --session $SESSION_ID --input '{
The executable template calls inference.sh to open pages, capture screenshots, or execute page JavaScript. It is useful but sends browser state and extracted content through an external service.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function execute --session $SESSION_ID --input '{
The executable template calls inference.sh to open pages, capture screenshots, or execute page JavaScript. It is useful but sends browser state and extracted content through an external service.
中
Unix shell invocation
#!/bin/bash
This is an executable shell template, not just documentation. Running it invokes the inference.sh CLI with user-provided URLs and browser sessions.
中
Shell command substitution
RESULT=$(infsh app run agent-browser --function open --session new --input '{
The line invokes the inference.sh CLI to control a browser session. This is intentional, but it executes an external command that can transmit page state, screenshots, or entered data.
中
Unix shell invocation
#!/bin/bash
This is an executable shell template, not just documentation. Running it invokes the inference.sh CLI with user-provided URLs and browser sessions.
リスク要因
⚙️ 外部コマンド (163)
references/authentication.md:24-26 references/authentication.md:51 references/authentication.md:52 references/authentication.md:70-72 references/authentication.md:80 references/authentication.md:97 references/authentication.md:115 references/authentication.md:116 references/authentication.md:128 references/authentication.md:129 references/authentication.md:133 references/authentication.md:153-156 references/authentication.md:179-181 references/authentication.md:202 references/authentication.md:215-217 references/authentication.md:218 references/authentication.md:222-223 references/authentication.md:243 references/authentication.md:246 references/authentication.md:285 references/authentication.md:292 references/authentication.md:21 references/authentication.md:68 references/authentication.md:174 references/proxy-support.md:22-25 references/proxy-support.md:35-40 references/proxy-support.md:65-68 references/proxy-support.md:76 references/proxy-support.md:107 references/proxy-support.md:111 references/proxy-support.md:113-116 references/proxy-support.md:119-121 references/proxy-support.md:137-142 references/proxy-support.md:150-153 references/proxy-support.md:186-189 references/proxy-support.md:192-194 references/proxy-support.md:195 references/proxy-support.md:267-270 references/proxy-support.md:273 references/proxy-support.md:294 references/proxy-support.md:50 references/proxy-support.md:90 references/snapshot-refs.md:124-126 references/snapshot-refs.md:136-138 references/snapshot-refs.md:140 references/snapshot-refs.md:142 references/video-recording.md:23-26 references/video-recording.md:38 references/video-recording.md:39 references/video-recording.md:48-52 references/video-recording.md:87-90 references/video-recording.md:93-95 references/video-recording.md:97 references/video-recording.md:100 references/video-recording.md:103 references/video-recording.md:104 references/video-recording.md:119-124 references/video-recording.md:156 references/video-recording.md:157 references/video-recording.md:168-171 references/video-recording.md:178 references/video-recording.md:179 references/video-recording.md:195 references/video-recording.md:197-200 references/video-recording.md:206 references/video-recording.md:207 references/video-recording.md:84 references/video-recording.md:116 references/video-recording.md:163 references/video-recording.md:192 SKILL.md:9 SKILL.md:15 SKILL.md:17-22 SKILL.md:22-29 SKILL.md:29-34 SKILL.md:34-58 SKILL.md:58-64 SKILL.md:64-65 SKILL.md:65 SKILL.md:66 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69-75 SKILL.md:75 SKILL.md:76 SKILL.md:77 SKILL.md:78 SKILL.md:79 SKILL.md:80 SKILL.md:81 SKILL.md:82 SKILL.md:83 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:87-88 SKILL.md:88 SKILL.md:89 SKILL.md:93-95 SKILL.md:95-101 SKILL.md:101-114 SKILL.md:114-127 SKILL.md:127-133 SKILL.md:133-139 SKILL.md:139-147 SKILL.md:147-154 SKILL.md:154-160 SKILL.md:160-166 SKILL.md:166-172 SKILL.md:172-178 SKILL.md:178-184 SKILL.md:184-189 SKILL.md:189-214 SKILL.md:214-228 SKILL.md:228-232 SKILL.md:232-243 SKILL.md:243-247 SKILL.md:247-261 SKILL.md:261-267 SKILL.md:267-268 SKILL.md:268-273 SKILL.md:273-279 SKILL.md:36-38 SKILL.md:39 SKILL.md:116-120 SKILL.md:215-217 SKILL.md:233-235 SKILL.md:248-251 SKILL.md:259 SKILL.md:34-58 SKILL.md:114-127 SKILL.md:214-228 SKILL.md:232-243 SKILL.md:247-261 templates/authenticated-session.sh:40-42 templates/authenticated-session.sh:43 templates/authenticated-session.sh:70-73 templates/authenticated-session.sh:74 templates/authenticated-session.sh:97 templates/authenticated-session.sh:98 templates/authenticated-session.sh:127-128 templates/authenticated-session.sh:130 templates/authenticated-session.sh:1 templates/capture-workflow.sh:28 templates/capture-workflow.sh:31 templates/capture-workflow.sh:54-59 templates/capture-workflow.sh:60 templates/capture-workflow.sh:63 templates/capture-workflow.sh:64 templates/capture-workflow.sh:86 templates/capture-workflow.sh:105-107 templates/capture-workflow.sh:114-115 templates/capture-workflow.sh:126-127 templates/capture-workflow.sh:132-133 templates/capture-workflow.sh:138-139 templates/capture-workflow.sh:1 templates/form-automation.sh:30-32 templates/form-automation.sh:33 templates/form-automation.sh:102 templates/form-automation.sh:104 templates/form-automation.sh:105 templates/form-automation.sh:110 templates/form-automation.sh:1
🌐 ネットワークアクセス (53)
references/authentication.md:25 references/authentication.md:71 references/authentication.md:154 references/authentication.md:180 references/authentication.md:194 references/commands.md:25 references/commands.md:56 references/proxy-support.md:23 references/proxy-support.md:24 references/proxy-support.md:36 references/proxy-support.md:37 references/proxy-support.md:54 references/proxy-support.md:55 references/proxy-support.md:56 references/proxy-support.md:66 references/proxy-support.md:94 references/proxy-support.md:95 references/proxy-support.md:96 references/proxy-support.md:100 references/proxy-support.md:101 references/proxy-support.md:102 references/proxy-support.md:138 references/proxy-support.md:139 references/proxy-support.md:151 references/proxy-support.md:161 references/proxy-support.md:162 references/proxy-support.md:175 references/proxy-support.md:187 references/proxy-support.md:188 references/proxy-support.md:252 references/proxy-support.md:259 references/proxy-support.md:152 references/proxy-support.md:165 references/proxy-support.md:168 references/video-recording.md:24 references/video-recording.md:49 references/video-recording.md:88 references/video-recording.md:120 references/video-recording.md:198 SKILL.md:9 SKILL.md:11 SKILL.md:21 SKILL.md:37 SKILL.md:117 SKILL.md:135 SKILL.md:149 SKILL.md:150 SKILL.md:216 SKILL.md:234 SKILL.md:249 SKILL.md:283 SKILL.md:284 templates/authenticated-session.sh:118
📁 ファイルシステムへのアクセス (15)
references/authentication.md:5 references/authentication.md:263 references/commands.md:3 references/commands.md:59 references/proxy-support.md:5 references/proxy-support.md:272 references/snapshot-refs.md:5 references/video-recording.md:5 references/video-recording.md:239 templates/authenticated-session.sh:30 templates/capture-workflow.sh:28 templates/capture-workflow.sh:78 templates/capture-workflow.sh:81 templates/capture-workflow.sh:149 templates/form-automation.sh:23
検出されたパターン
Screen capture upload
監査者: codex 監査履歴を表示 →
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/tul-sh-agent-browser/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/tul-sh-agent-browser?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/tul-sh-agent-browser?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tul-sh-agent-browser/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/tul-sh-agent-browser.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
tul-sh. (2026). agent-browser security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tul-sh-agent-browser/audits/4BibTeX形式の引用
@techreport{tul-sh-tul-sh-agent-browser-2026,
author = {tul-sh},
title = {agent-browser security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/tul-sh-agent-browser/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "agent-browser security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "tul-sh"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/tul-sh-agent-browser/audits/4"
identifiers:
- type: other
value: "skillstore:tul-sh-agent-browser:audit:4"
description: "Skillstore immutable audit report identifier"
バリアントを比較
インストール可能なバリアント 19 件各作者のスキルは個別のインストール項目として維持されます。推奨バリアントは Skillstore の証拠で順位付けされます。
このバリアントが首位の理由
Skillstore スコアが最高
作者 / ソース Skillstore スコア 証拠の信頼度 Skillstore 利用状況 更新済み
supercent-io 推奨
supercent-io-agent-browser
Skillstore スコア 78
証拠の信頼度 高
Skillstore 利用状況 53
更新済み
2026-09-09
inference-sh-8-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 32
更新済み
2026-09-09
inference-sh-9-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 21
更新済み
2026-09-09
infsh-skills-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 18
更新済み
2026-09-09
inference-sh-skills-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 16
更新済み
2026-09-09
inference-sh-0-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 16
更新済み
2026-09-09
inference-shell-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 15
更新済み
2026-09-09
inference-skills-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 14
更新済み
2026-09-09
halt-catch-fire-agent-browser
Skillstore スコア 38
証拠の信頼度 中
Skillstore 利用状況 8
更新済み
2026-09-09
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 45
アーキテクチャ
85
保守性
87
コンテンツ
70
コミュニティ
91
仕様準拠
作成できるもの
Webフォームチェックを繰り返す
テストフォームを開き、要素参照を検出し、フィールドに入力して送信し、レビュー用の証跡を取得します。
公開ページのコンテンツを収集する
構造化分析のために、公開ページからページテキスト、リンク、スクリーンショット、基本的なメタデータを取得します。
ブラウザワークフローを文書化する
製品ワークフローをステップごとに示す、ガイド付きブラウザセッションとスクリーンショットを記録します。
これらのプロンプトを試す
ページを調査する
Open this URL, take a snapshot, list the important interactive elements, then close the browser session: [URL].
証跡を取得する
Open [URL], capture a full-page screenshot, summarize the visible page state, and close the session.
フォームをテストする
Use the form automation pattern on [URL]. Discover the form fields, ask before entering sensitive data, submit only after confirmation, and report the result.
認証済みフローを監査する
Guide me through an authenticated browser workflow for [APP]. Do not record video or extract cookies unless I explicitly approve that step.
ベストプラクティス
- 認証情報の入力、ファイルのアップロード、動画録画、Cookieの抽出を行う前に確認を求めます。
- ナビゲーション、フォーム送信、モーダル変更、動的更新のたびに最新のスナップショットを使用します。
- セッションは速やかに閉じ、機密データを含むスクリーンショットや動画の保存を避けます。
回避
- 許可がないサイト、または自動化が利用規約に違反するサイトを自動化しないでください。
- レート制限やアクセス制御を回避するためにプロキシローテーションを使用しないでください。
- パスワード、2FAシークレット、セッションCookie、プロキシ認証情報をプロンプトやスクリプトにハードコードしないでください。
よくある質問
このスキルには別のサービスが必要ですか？
はい。inference.sh CLIを使用し、認証済みのinference.shアカウントが必要です。
Webページ上でクリックや入力ができますか？
はい。スナップショットの要素参照を使用して、クリック、入力、選択、スクロール、ドラッグ、ファイルアップロードを行います。
動画を録画できますか？
はい。動画録画は任意であり、機密性のないセッションでのみ有効にするべきです。
ログインフローを処理できますか？
認証済みセッションのガイダンスが含まれていますが、ユーザーは各認証情報と2FAの手順を承認する必要があります。
プロキシに対応していますか？
はい。認証付きプロキシを含む、HTTP、HTTPS、SOCKS5プロキシ設定について文書化しています。
機密サイトに対して安全ですか？
注意して使用してください。ブラウザデータ、スクリーンショット、動画、ページコンテンツがサードパーティサービスによって処理される場合があります。
開発者情報
作成者
tul-shライセンス
MIT
Skillstore リビジョン
r1
バージョンに関する注意
作者はバージョンを宣言していません。
参照
36e07d5e13068e5be64447e8f20b427cf2cbd21a
メンテナンスの新しさ
2026/7/18
利用状況
34 ダウンロード · 213 閲覧