anti-detect-browser@r1

CAUTION

Publisher claims: "Drive Chromium from standard Playwright APIs with a real-device fingerprint applied in the kernel, one persistent isolated profile per identity, and a per-profile proxy whose exit IP sets timezone and WebRTC - JavaScript (npm 'anti-detect-browser') or Python (PyPI 'antibrow'). Use when sessions must stay logged in across runs and stay separate, when a scraper or agent is blocked by an incoherent headless fingerprint, when checking ads or pricing from another region, when a page must be reached as a phone rather than a desktop, when automation mints a profile per task, when running several of your own accounts from one machine, or when testing how your own bot detection scores a real device. Also for 'antibrow', 'fingerprint browser', 'multi-account browser', '防关联', '多账号', '安卓模拟', 'Android profile', 'mobile fingerprint', 'temporary profile', 'CreepJS', 'residential proxy', 'browser-use', 'crawl4ai'. MCP control is browser-mcp-agent; isolation is multi-account-isolation." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher antibrow · joined 2 days agoInstalls 134KLast detonated 29 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsSKILL.md:68 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsSKILL.md:73 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageSKILL.md:111 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsSKILL.md:290 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionSKILL.md:518 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Destructive file system command detectedreferences/rest-api-and-docker.md:58 · Destructive file system command detected

AST05

CRITICAL

Access to sensitive file pathsSKILL.md:226 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Refusal suppressionreferences/android-profiles.md:22 · Refusal suppression — attempting to prevent safety responses

AST01

HIGH

npx invocation of non-well-known packageSKILL.md:234 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsSKILL.md:207 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageSKILL.md:127 · npx invocation of non-well-known package — may execute untrusted code

AST06