Skill unknown browser-automation
Risk level
critical
95/100

Browser Act ↗

Browser Act is an unverified skill from browser-act. Anomity scores its risk at 95 out of 100 (critical). It matches 1 dangerous capability combination.

shell:execute browser:control network:outbound

Analysis summary

Browser Act is an unverified skill from browser-act. Anomity scores its risk at 95 out of 100 (critical). It matches 1 dangerous capability combination.

A CLI for browser automation that includes stealth features and CAPTCHA solving, aimed at driving sites that actively resist automation.

It runs as a command-line tool controlling a browser and reaching the network, so it declares shell execution, browser control, and outbound network — a combination that scores high in this catalog. CAPTCHA solving is worth naming plainly: it exists to defeat a control the site operator deliberately put in place, and building it into an agent stack is a choice about what that agent is for.

Why this entry scored 95 out of 100

This profile starts at the catalog's neutral base of 50. Because the entry is unverified publisher, trust adjusts the score by +20. Declared high-risk capabilities add +10 (capped at +30). It matches 1 dangerous capability combination, which contributes additional severity weight. The clamped result is 95, placing it in the critical band.

See the full scoring formula →

Findings

  • Unknown publisher Critical
    Contribution to score: +20
  • 1 high-risk capability: shell:execute High
    Contribution to score: +10
  • Data exfiltration risk (high) High
    Evidence
    Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.
    Contribution to score: +15

Capabilities

Every capability the entry declares, with the security implication of each.

  • shell:execute Shell execution
    Can run arbitrary shell commands. Combined with network access this becomes effectively a remote shell.
  • browser:control Browser control
    Drives a browser session. Combined with credential access can impersonate the user on web services.
  • network:outbound Outbound network
    Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access.

Dangerous combinations matched

Capability pairings that compound into well-known attack patterns.

  • Data exfiltration risk high
    Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.
    shell:execute network:outbound