Skip to main content

browser-automation

Automates web browsing and data extraction using vision-driven techniques, enabling interaction with web elements without DOM access.

Install this skill

or
55/100

Security score

The browser-automation skill was audited on Jun 15, 2026 and we found 19 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 60

Curl to non-GitHub URL

SourceSKILL.md
60curl -s --max-time 2 -o /dev/null -w "%{http_code}" -H "Upgrade: websocket" -H "Connection: Upgrade" -H "Sec-WebSocket-Version: 13" -H "Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==" http://127.0.0.1:92
medium line 71

Access to .env file

SourceSKILL.md
71Midscene requires models with strong visual grounding capabilities. The following environment variables must be configured — either as system environment variables or in a `.env` file in the current w
medium line 342

Access to .env file

SourceSKILL.md
342- Check `.env` file contains `MIDSCENE_MODEL_API_KEY=<your-key>`.
high line 295

Prompting for password/secret input

SourceSKILL.md
2954. **Batch related operations into a single `act` command**: For example, fill the email and password fields, then click Log In in one prompt. Use separate commands when you need to inspect the interm
low line 20

External URL reference

SourceSKILL.md
20Powered by Midscene.js (https://midscenejs.com)
low line 60

External URL reference

SourceSKILL.md
60curl -s --max-time 2 -o /dev/null -w "%{http_code}" -H "Upgrade: websocket" -H "Connection: Upgrade" -H "Sec-WebSocket-Version: 13" -H "Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==" http://127.0.0.1:92
low line 76

External URL reference

SourceSKILL.md
76MIDSCENE_MODEL_BASE_URL="https://..."
low line 85

External URL reference

SourceSKILL.md
85MIDSCENE_MODEL_BASE_URL="https://generativelanguage.googleapis.com/v1beta/openai/"
low line 94

External URL reference

SourceSKILL.md
94MIDSCENE_MODEL_BASE_URL="https://dashscope.aliyuncs.com/compatible-mode/v1"
low line 100

External URL reference

SourceSKILL.md
100# MIDSCENE_MODEL_BASE_URL="https://openrouter.ai/api/v1"
low line 108

External URL reference

SourceSKILL.md
108MIDSCENE_MODEL_BASE_URL="https://ark.cn-beijing.volces.com/api/v3"
low line 114

External URL reference

SourceSKILL.md
114If the model is not configured, ask the user to set it up. See [Model Configuration](https://midscenejs.com/model-common-config) for supported providers.
low line 123

External URL reference

SourceSKILL.md
123npx -y @midscene/web@1 connect --cdp ws://127.0.0.1:9222/devtools/browser --url https://example.com
low line 141

External URL reference

SourceSKILL.md
141npx -y @midscene/web@1 --bridge connect --url https://example.com
low line 150

External URL reference

SourceSKILL.md
150- Install the extension from Chrome Web Store: https://chromewebstore.google.com/detail/midscenejs/gbldofcpkknbggpkmbdaefngejllnief
low line 156

External URL reference

SourceSKILL.md
156- See the [Bridge Mode documentation](https://midscenejs.com/bridge-mode-by-chrome-extension.html).
low line 163

External URL reference

SourceSKILL.md
163npx -y @midscene/web@1 connect --url https://example.com
low line 216

External URL reference

SourceSKILL.md
216--image "https://github.githubassets.com/assets/GitHub-Mark-ea2971cee799.png" \
low line 243

External URL reference

SourceSKILL.md
243"url": "https://github.githubassets.com/assets/GitHub-Mark-ea2971cee799.png"
Scanned on Jun 15, 2026
View Security Dashboard
Installation guide →