Threats affecting pkg:npm/BrowserSkill

Tencent BrowserSkill versions up to 0.3.0 have an authentication bypass vulnerability due to improper origin validation in the local daemon WebSocket. This flaw allows any chrome-extension origin with 32 characters in the range a-p to be accepted, enabling attackers to register malicious extensions as browser clients. Exploitation can lead to interception and manipulation of page content, DOM, and screenshots returned to the AI agent.