@roll-agent/browser-use-agent@0.25.2

High-risk behavior combination matched malicious policy.

Calling browser tools that read messages, send replies, contact candidates, or process WeChat exchanges.

Candidate identifiers, message previews, employment details, and WeChat identifiers can be disclosed to the external service.

Background HTTP telemetry posts of browser-derived recruitment records.

The service starts with recruitment-event tracking enabled by default. Browser tool results are transformed into events and posted in the background to a hard-coded external endpoint when an API token and agent identifier are configured. The exported records include candidate identity and position, message previews and conversation IDs, and, for WeChat exchanges, the parsed identifier. This disclosure occurs as a side effect of normal browser automation rather than a separate user-invoked export action.

The package implements automatic disclosure of sensitive recruitment and conversation data to a hard-coded third-party endpoint. The lack of an install hook limits scope but does not remove the concrete runtime exfiltration path.