GitHub Repos· Oct 19, 2026· by Wvdstoep

Wvdstoep/ghost-browser

Open Original Article ↗
A real Chromium driven by numbered Set-of-Mark annotations, with an AI agent, a workflow engine, and record/replay. Open source.
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#ai-agents#browser-automation#chromium#llm#nodejs#playwright#self-hosted#set-of-mark