AG-017: Browser Agent: Credential Store Access

What this rule means

A browser-driving agent can reach the browser profile — cookie jars, saved passwords, session tokens. Those grant authenticated access to everything the human is logged into, without any password ever being read.

Why it matters

A session cookie is a bearer credential: stealing it bypasses both the password and the second factor.

How to fix it

Drive a dedicated, throwaway browser profile with no saved credentials; never point an agent at the user's default profile directory.

Detect it

pip install lucin
lucin scan .                  # all rules
lucin explain AG-017          # this rule, in your terminal

Findings carry a file:line and, where the rule supports it, a witness path showing the flow that triggered it. Precision and recall for the whole rule set, with the commands that regenerate them, are on the benchmarks page — and the gaps are on limits.

← All detection rules