Trust Assessment
fast-browser-use received a trust score of 10/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.
SkillShield's automated analysis identified 13 findings: 0 critical, 1 high, 11 medium, and 1 low severity. Key findings include Unsafe deserialization / dynamic eval, Unpinned npm dependency version, Node lockfile missing.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. The Manifest Analysis layer scored lowest at 22/100, indicating areas for improvement.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings13
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Unsafe deserialization / dynamic eval Decryption followed by code execution Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/dalessandro07/fast-browser-use-src/src/dom/extract_dom.js:492 | |
| MEDIUM | Unsafe deserialization / dynamic eval Decryption followed by code execution Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/dalessandro07/fast-browser-use-src/src/tools/Readability.min.js:348 | |
| MEDIUM | Unsafe deserialization / dynamic eval Decryption followed by code execution Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/dalessandro07/fast-browser-use-src/src/tools/Readability.min.js:435 | |
| MEDIUM | Unsafe deserialization / dynamic eval Decryption followed by code execution Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/dalessandro07/fast-browser-use-src/src/tools/Readability.min.js:449 | |
| MEDIUM | Unsafe deserialization / dynamic eval Decryption followed by code execution Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/dalessandro07/fast-browser-use-src/src/tools/Readability.min.js:1087 | |
| MEDIUM | Unsafe deserialization / dynamic eval Decryption followed by code execution Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/dalessandro07/fast-browser-use-src/src/tools/Readability.min.js:1106 | |
| MEDIUM | Unsafe deserialization / dynamic eval Decryption followed by code execution Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/dalessandro07/fast-browser-use-src/src/tools/Readability.min.js:1173 | |
| MEDIUM | Unsafe deserialization / dynamic eval Decryption followed by code execution Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/dalessandro07/fast-browser-use-src/src/tools/Readability.min.js:1223 | |
| MEDIUM | Unsafe deserialization / dynamic eval Decryption followed by code execution Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/dalessandro07/fast-browser-use-src/src/tools/Readability.min.js:1295 | |
| MEDIUM | Unsafe deserialization / dynamic eval Decryption followed by code execution Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/dalessandro07/fast-browser-use-src/src/tools/Readability.min.js:1412 | |
| MEDIUM | Unpinned npm dependency version Dependency 'prettier' is not pinned to an exact version ('^3.8.1'). Pin dependencies to exact versions to reduce drift and supply-chain risk. | Dependencies | skills/dalessandro07/fast-browser-use-src/package.json | |
| MEDIUM | Custom Homebrew Tap for Skill Installation The skill's installation instructions specify a custom Homebrew tap (`rknoche6/tap/fast-browser-use`). Custom taps are maintained by individual users and are not subject to the same level of security vetting as official Homebrew formulae. This introduces a supply chain risk as the integrity of the installed binary depends entirely on the security practices of the `rknoche6` user and their GitHub repository. A compromised tap could lead to the installation of malicious software. Recommend using official package repositories or providing a mechanism for verifying the integrity (e.g., checksums, signed binaries) of the custom tap's contents. Alternatively, the skill could be packaged as a pre-compiled binary with checksums or distributed via a more trusted channel. | LLM | SKILL.md | |
| LOW | Node lockfile missing package.json is present but no lockfile was found (package-lock.json, pnpm-lock.yaml, or yarn.lock). Commit a lockfile for deterministic dependency resolution. | Dependencies | skills/dalessandro07/fast-browser-use-src/package.json |
Scan History
Embed Code
[](https://skillshield.io/report/8772e4c7a4783208)
Powered by SkillShield