browser.aginx.net

Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.

Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

Returns all cookies for the session's current URL as raw name=value strings, which can include authentication/session tokens. Legitimate for session persistence, but if this output is echoed back into a transcript, logged, or forwarded to a third party, it constitutes credential leakage. Agents should avoid exposing this data outside the tool round-trip (e.g. to session_create).

Many sites store auth tokens in localStorage rather than cookies. This tool dumps the full local/session storage for the current origin; same exfiltration risk as session_cookies if the returned data leaves the tool round-trip context.

The tool parses an arbitrary 'Copy as cURL' command which may contain Authorization headers, session cookies, and other secrets pasted directly by the user. While the stated purpose (importing login state) is legitimate, the tool has no visible scoping/redaction and the resulting session_id carries all captured credentials — care should be taken that this sensitive data isn't logged or surfaced elsewhere.

Exporting a session's action log as a runnable curl script could bake in cookies or tokens used during the session, producing a portable artifact containing live credentials. Legitimate automation feature, but the output should be handled as sensitive if the session was authenticated.