·
Last changedVersion:
This version did not pass the hardening gate. Hardening applied 23 targeted changes and preserved all other text. Classified findings before hardening: 7. Classified findings closed: 1. Classified findings remaining: 7 (1 introduced by hardening). Unclassified scanner findings remaining: 0. Review findings closed: 19. Review findings remaining: 4.
5
2
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Malicious Code & Command Execution | — | Medium | Open | |
SKILL.md | Tool & MCP Manipulation | MCP configuration abuse | Medium | Introduced | |
SKILL.md | Sensitive Data & Secret Exposure | Hardcoded secret | Medium | Open | |
SKILL.md | Supply Chain & Install-Time Trust | Install-time download and execute | Medium | Open | |
SKILL.md | Excessive Agency & Rogue Autonomy | — | Medium | Open | |
SKILL.md | Sensitive Data & Secret Exposure | Data exfiltration | Medium | Open | |
SKILL.md | Supply Chain & Install-Time Trust | Dependency or plugin compromise | Low | Open | |
SKILL.md | Prompt Injection | Indirect prompt injection | Low | Closed |
8 findings
No skill file found.
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/browser-use/skills/x402:latest
MIT
HARDENING.md