web-browser

Environment file access

`rsync -a --delete "${process.env["HOME"]}/Library/Application Support/Google/Chrome/" ~/.cache/scra

The command copies the default Google Chrome profile, which can contain cookies, logins, history, and authentication tokens. This is sensitive data handling.

高

SKILL.md:15 scripts/start.js:34 scripts/start.js:43-44

Environment file access

`--user-data-dir=${process.env["HOME"]}/.cache/scraping`,

The spawned browser uses the hidden cached profile directory as its user data directory. If populated from the profile copy, it exposes sensitive session data to CDP automation.

高

Browser Profile Copying Exposes Authenticated Sessions

The documentation advertises copying cookies and logins with the profile option, and start.js rsyncs the default Chrome profile into ~/.cache/scraping. Running that copied profile under CDP can expose authenticated sessions to local browser automation.

The SKILL.md text explicitly says the profile option copies cookies and logins, and the code performs a full Chrome profile rsync. The same profile is used by a remotely controlled Chrome instance.

高

SKILL.md:18 scripts/start.js:43-44 scripts/eval.js:29-31

Unauthenticated Local CDP Browser Control

The skill starts Chrome on port 9222 and helper scripts connect to that endpoint for navigation, screenshots, element inspection, and page JavaScript evaluation. Any local process with access to that endpoint can control the browser context.

The documentation and start script identify the fixed CDP port, and eval.js demonstrates active page code execution through that browser session. The risk depends on local access but is directly supported by the code.

機能レビュー項目 (20)

これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。

高

scripts/eval.js:31

Ruby/shell backtick execution

return new AsyncFunction(`return (${c})`)();

The helper builds an AsyncFunction from command-line input and executes it inside the active page. This is intentional page code execution and can read or modify page data.

高

scripts/start.js:3

Node.js child_process module

import { spawn, execSync } from "node:child_process";

The file imports child_process and later uses it to kill Chrome, create directories, sync a browser profile, and launch Chrome. This is real process execution capability.

高

scripts/start.js:40

Process spawn

spawn(

The script spawns Google Chrome with remote debugging enabled and a custom user data directory. Launching a browser control surface is a real external process risk.

高

scripts/start.js:22

Synchronous process execution

execSync("killall 'Google Chrome'", { stdio: "ignore" });

The script executes killall for Google Chrome, which can terminate the user's existing browser session. The command is hardcoded but has disruptive local side effects.

高

scripts/start.js:33

Synchronous process execution

execSync(

The script runs rsync through the shell to copy the default Chrome profile. This external command can copy sensitive browser data and uses an environment-derived path.

高

Ruby/shell backtick execution

`rsync -a --delete "${process.env["HOME"]}/Library/Application Support/Google/Chrome/" ~/.cache/scra

The template literal constructs the rsync shell command that copies the Chrome profile into a hidden cache. That profile can include cookies, logins, history, and tokens.

高

scripts/start.js:29

Hidden file in home directory

execSync("mkdir -p ~/.cache/scraping", { stdio: "ignore" });

The script creates ~/.cache/scraping for Chrome user data. This hidden directory can store copied browser session data outside the normal Chrome profile location.

高

Hidden file in home directory

`rsync -a --delete "${process.env["HOME"]}/Library/Application Support/Google/Chrome/" ~/.cache/scra

The rsync target is ~/.cache/scraping and the source is the default Chrome profile. Copying authenticated browser profile data into a hidden directory is sensitive.

高

Hidden file access

`rsync -a --delete "${process.env["HOME"]}/Library/Application Support/Google/Chrome/" ~/.cache/scra

The rsync command copies the user's Chrome profile into the hidden cache directory. This is sensitive filesystem access because the profile can contain sessions and tokens.

中

scripts/start.js:29

Hidden file access

execSync("mkdir -p ~/.cache/scraping", { stdio: "ignore" });

The script creates and uses a hidden cache path under the user home directory. The path is intended, but it can hold browser profile data.

中

Hidden file access

`--user-data-dir=${process.env["HOME"]}/.cache/scraping`,

Chrome is launched with a hidden user-data-dir under ~/.cache/scraping. When the profile option is used, that directory contains copied browser session data.

低

scripts/eval.js:15

Hardcoded URL

browserURL: "http://localhost:9222",

The script connects to the local Chrome DevTools Protocol endpoint on port 9222. This is intended local networking but exposes browser-control capability to the helper.

低

scripts/nav.js:17

Hardcoded URL

browserURL: "http://localhost:9222",

The script connects to the local Chrome DevTools Protocol endpoint on port 9222 to navigate pages. This is intended local networking with browser-control impact.

低

scripts/pick.js:14

Hardcoded URL

browserURL: "http://localhost:9222",

The script connects to localhost port 9222 to inspect the active browser page. This is intended CDP access but still exposes page data through browser automation.

低

scripts/screenshot.js:8

Hardcoded URL

browserURL: "http://localhost:9222",

The screenshot helper connects to the local Chrome DevTools Protocol endpoint. This is intended local browser access and can capture sensitive active-page content.

低

scripts/start.js:55

Hardcoded URL

browserURL: "http://localhost:9222",

The start script polls localhost port 9222 to confirm the Chrome DevTools Protocol endpoint is available. This confirms a local browser-control interface is exposed.

低

Environment variable access (bracket notation)

`rsync -a --delete "${process.env["HOME"]}/Library/Application Support/Google/Chrome/" ~/.cache/scra

The HOME environment variable determines the source path used in a shell-based rsync profile copy. HOME is not a secret, but environment-controlled path construction affects sensitive file access.

低

Environment variable access (bracket notation)

`--user-data-dir=${process.env["HOME"]}/.cache/scraping`,

The HOME environment variable determines the Chrome user-data-dir path. This is low risk by itself but relevant to profile storage and browser-control behavior.

低

Environment variable object

`rsync -a --delete "${process.env["HOME"]}/Library/Application Support/Google/Chrome/" ~/.cache/scra

The script reads process.env to construct the Chrome profile copy command. This is low risk alone, but it influences sensitive browser-profile filesystem access.

低

pnpm-lock.yaml:310 pnpm-lock.yaml:706 pnpm-lock.yaml:715 scripts/start.js:29 scripts/start.js:34 scripts/start.js:29 scripts/start.js:34 scripts/start.js:44

Environment variable object

`--user-data-dir=${process.env["HOME"]}/.cache/scraping`,

The script reads process.env to construct the Chrome user-data-dir argument. This is low risk alone, but it controls where browser data is stored.

リスク要因

📁 ファイルシステムへのアクセス (8)

⚙️ 外部コマンド (30)

🌐 ネットワークアクセス (9)

scripts/eval.js:15 scripts/nav.js:11 scripts/nav.js:12 scripts/nav.js:17 scripts/pick.js:14 scripts/screenshot.js:8 scripts/start.js:55 SKILL.md:23 SKILL.md:24

🔑 環境変数 (4)

scripts/start.js:34 scripts/start.js:44 scripts/start.js:34 scripts/start.js:44

監査者: codex 監査履歴を表示 →

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/dwsy-web-browser/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/dwsy-web-browser/security.svg)](https://skillstore.io/skills/dwsy-web-browser?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/dwsy-web-browser?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dwsy-web-browser/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/dwsy-web-browser.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

Dwsy. (2026). web-browser security audit report (audit version 7) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dwsy-web-browser/audits/7

BibTeX形式の引用

@techreport{dwsy-dwsy-web-browser-2026,
  author = {Dwsy},
  title = {web-browser security audit report (audit version 7)},
  institution = {Skillstore},
  year = {2026},
  number = {7},
  url = {https://skillstore.io/skills/dwsy-web-browser/audits/7},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "web-browser security audit report (audit version 7)"
version: "unspecified"
type: report
authors:
  - name: "Dwsy"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/dwsy-web-browser/audits/7"
identifiers:
  - type: other
    value: "skillstore:dwsy-web-browser:audit:7"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

檢查網頁流程

開啟頁面、進行基本導覽、擷取截圖，並在手動測試審查期間驗證可見狀態。

檢查頁面結構

選取頁面元素，並收集其可見文字、屬性、HTML 和父層脈絡以供偵錯。

審查網頁內容

導覽公開頁面、摘要可見內容，並保留截圖以供之後比較。

これらのプロンプトを試す

開啟頁面

使用 web-browser skill 啟動全新的瀏覽器、開啟 [URL]，並告訴我頁面是否正確載入。

列出重要連結

導覽至 [URL]，計算可見連結數量，並列出最重要的導覽標籤及其目的地。

擷取 UI 狀態

開啟 [URL]、執行 [steps]、擷取截圖，並摘要可見狀態和任何錯誤。

檢查互動元素

在 [URL] 上針對 [task] 使用元素選取器。傳回所選元素詳細資訊，並建議可靠的 selector。

ベストプラクティス

除非任務需要已登入狀態，否則請使用全新的瀏覽器 profile。
只開啟受信任的 URLs，並在審查完成後關閉瀏覽器。
登入時，請將截圖、所選元素資料和評估輸出視為敏感資訊。

回避

除非已接受 session 風險，否則不要對個人帳戶使用 profile 選項。
任務完成後，不要讓 Chrome 遠端偵錯連接埠保持開啟。
不要將不受信任的 JavaScript 貼到評估輔助工具中。

よくある質問

此技能會瀏覽公開網頁嗎？

是。它會控制本機 Chrome 瀏覽器，因此開啟的頁面可以發出一般網頁請求。

它需要 Google Chrome 嗎？

是。啟動指令碼使用 macOS Google Chrome 應用程式路徑和 Chrome DevTools Protocol。

它可以使用我已登入的 sessions 嗎？

可以，但只有在使用 profile 選項時。該選項會將 cookies 和登入資訊複製到工作 profile 中。

它會將資料傳送到外部伺服器嗎？

輔助指令碼會連線到 localhost。在 Chrome 中開啟的網站可以發出自己的網路請求。

它可以擷取截圖嗎？

可以。它會將作用中視口儲存為系統暫存目錄中的截圖。

建議自動安裝嗎？

不建議。建議先進行審查，因為此技能使用程序執行、檔案系統存取、瀏覽器 profile 複製和 CDP 控制。

開発者情報

作成者

Dwsy

ライセンス

Stolen from Mario

Skillstore リビジョン

バージョンに関する注意

作者はバージョンを宣言していません。

リポジトリ

https://github.com/Dwsy/agent/tree/main/skills/web-browser

参照

72d5025b022c77f7a51bdf5c1637c689c80e89d1

メンテナンスの新しさ

2026/7/23

利用状況

8 ダウンロード · 222 閲覧

ファイル構成

📁 scripts/

📄 eval.js

📄 nav.js

📄 pick.js

📄 screenshot.js

📄 start.js

📄 pnpm-lock.yaml

📄 SKILL.md

Dwsy のその他のスキル

すべて表示

project-planner

使用結構化文件規劃軟體專案

當需求、設計選擇和任務不清楚時，軟體專案往往會失敗。此技能會將專案想法轉化為適用於 Claude、Codex 和 Claude Code 工作流程的結構化規劃文件。

ドキュメント表示

svg-logo-generator

建立幾何 SVG 標誌

團隊需要不依賴繁重設計工具的可縮放標誌。此技能會引導 Claude、Codex 和 Claude Code 使用 Python 產生乾淨的 SVG 標誌。

デザイン＆クリエイティブ表示

context7

研究 GitHub Issues 與程式碼範例

開發者會花費時間搜尋分散在 GitHub issues、pull requests、discussions 與程式碼範例中的資訊。此技能會引導針對錯誤、相依性與實作模式進行聚焦的儲存庫搜尋。

調査＆学習表示

system-design

系統設計架構目錄

需求不明確可能導致過早實作，並遺漏架構決策。此技能會引導結構化探索，並建立以 Mermaid 為基礎的設計目錄，以便共同規劃。

デザイン＆クリエイティブ表示

ast-grep

使用 ast-grep 搜尋並重寫程式碼

大型程式碼庫會讓文字搜尋錯過結構性模式。此技能會引導 Claude、Codex 和 Claude Code 使用 ast-grep 進行語法感知搜尋、linting 和重寫。

コーディング＆開発表示

ai-runtime-memory

使用 SQL 風格查詢追蹤專案記憶

長時間工作階段後，專案決策與脈絡可能很難復原。此技能會將 AI 執行階段記憶整理到本機檔案中，並提供用於時間軸、標籤和摘要的查詢工具。

生産性表示

すべて表示

adscrawl-browser

Extract and Automate Websites with AdsCrawl

作成者 adscrawl

Modern websites often require browser rendering before useful content appears. This skill uses AdsCrawl for extraction, screenshots, and stateful browser sessions.

調査＆学習表示