use-native-edge-browser-harness
Facilitates browser tasks using Microsoft Edge, enabling access to websites like Xiaohongshu with a logged-in state and error recovery.
Install this skill
or
81/100
Security score
The use-native-edge-browser-harness skill was audited on Jun 10, 2026 and we found 19 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
low line 16
External URL reference
SourceSKILL.md
| 16 | - CDP endpoint: `http://127.0.0.1:9222` |
low line 28
External URL reference
SourceSKILL.md
| 28 | try { (Invoke-WebRequest -UseBasicParsing -Uri "http://127.0.0.1:9222/json/version" -TimeoutSec 5).Content } catch { $_.Exception.Message } |
low line 37
External URL reference
SourceSKILL.md
| 37 | Start-Process -FilePath "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -ArgumentList '--remote-debugging-port=9222 --user-data-dir="C:\Users\Pans0020\AppData\Local\Microsoft\Edge\User |
low line 41
External URL reference
SourceSKILL.md
| 41 | Important: keep `-ArgumentList` as **one single-quoted string**. Do not pass `--user-data-dir=C:\Users\Pans0020\AppData\Local\Microsoft\Edge\User Data` as an unquoted array item; PowerShell may split |
low line 46
External URL reference
SourceSKILL.md
| 46 | $v = (Invoke-WebRequest -UseBasicParsing -Uri "http://127.0.0.1:9222/json/version" -TimeoutSec 5).Content | ConvertFrom-Json |
low line 52
External URL reference
SourceSKILL.md
| 52 | Important: on this Windows Browser Harness build, `admin.py` decides “remote CDP vs local Chrome mode” by checking `BU_CDP_WS`. If only `BU_CDP_URL='http://127.0.0.1:9222'` is set, Browser Harness may |
low line 61
External URL reference
SourceSKILL.md
| 61 | For Xiaohongshu, prefer `https://www.xiaohongshu.com/`; successful final URL is often `https://www.xiaohongshu.com/explore`. |
low line 69
External URL reference
SourceSKILL.md
| 69 | - `https://www.google.com/` should load with title `Google`. |
low line 70
External URL reference
SourceSKILL.md
| 70 | - `https://x.com/` should load with title similar to `X。尽是新鲜事 / X`. |
low line 106
External URL reference
SourceSKILL.md
| 106 | | `Daemon is unreachable` | Browser Harness daemon is not listening | Set `BU_CDP_WS` from `http://127.0.0.1:9222/json/version`, then run `run.py -c`; do not rely on `BU_CDP_URL` alone | |
low line 108
External URL reference
SourceSKILL.md
| 108 | | `chrome-error://chromewebdata/` or `http://data/` | `User Data` path was split by bad quoting | Restart with the single-string `-ArgumentList` command | |
low line 119
External URL reference
SourceSKILL.md
| 119 | try { $v = (Invoke-WebRequest -UseBasicParsing -Uri "http://127.0.0.1:9222/json/version" -TimeoutSec 5).Content | ConvertFrom-Json; "9222 OK: $($v.Browser) $($v.webSocketDebuggerUrl)" } catch { $_.Exc |
low line 132
External URL reference
SourceSKILL.md
| 132 | "url": "https://www.xiaohongshu.com/explore", |
low line 142
External URL reference
SourceSKILL.md
| 142 | https://ecs.console.aliyun.com/securityGroup/region/cn-shenzhen |
low line 145
External URL reference
SourceSKILL.md
| 145 | If `page_info()` ends at `https://account.aliyun.com/login/login.htm?...` with title `阿里云登录页`, do not guess credentials or try to bypass login. Tell the user to complete login/scan in the visible Edge |
low line 167
External URL reference
SourceSKILL.md
| 167 | $tabs = (Invoke-WebRequest -UseBasicParsing -Uri 'http://127.0.0.1:9222/json/list').Content | ConvertFrom-Json |
low line 174
External URL reference
SourceSKILL.md
| 174 | $v = (Invoke-WebRequest -UseBasicParsing -Uri 'http://127.0.0.1:9222/json/version' -TimeoutSec 5).Content | ConvertFrom-Json |
low line 207
External URL reference
SourceSKILL.md
| 207 | for u in ['https://www.google.com/','https://x.com/']: |
low line 223
External URL reference
SourceSKILL.md
| 223 | url='https://news.google.com/rss/search?'+urllib.parse.urlencode({'q':q,'hl':'zh-CN','gl':'CN','ceid':'CN:zh-Hans'}) |
Scanned on Jun 10, 2026
View Security Dashboard