brightdata-plugin
Web scraping, Google search, structured data extraction, and MCP server integration powered by Bright Data. Includes 7 skills: scrape any webpage as markdown (with bot detection/CAPTCHA bypass), search Google with structured JSON results, extract data from 40+ websites (Amazon, LinkedIn, Instagram, TikTok, YouTube, and more), orchestrate Bright Data's 60+ MCP tools, built-in best practices for Web Unlocker, SERP API, Web Scraper API, and Browser API, Python SDK best practices for the brightda...
Ecosystem
2 related extensionsSecurity Findings
8Hardcoded C2 with exfil/exec behavior
Contacts a hardcoded public IP paired with download/eval/sensitive-access/upload
skills/bright-data-best-practices
Remote code execution pipe
Downloads and pipes to shell: curl -fsSL https://cli.brightdata.com/install.sh | bash
skills/bright-data-best-practices
Password-protected archive
Password-protected archive URL: https://brightdata.com/static/brightdata_proxy_ca.zip
skills/proxy
Hardcoded C2 infrastructure
Hardcoded public IP address: 100.27.150.189
skills/bright-data-best-practices
Hardcoded C2 infrastructure
Hardcoded public IP address: 18.214.10.85
skills/bright-data-best-practices
No tagged releases
Repo ships no git tags and no GitHub releases — consumers cannot pin to stable, reviewable versions
Sensitive file access
Access to sensitive file: %APPDATA%\brightdata-cli\credentials.json
skills/bright-data-best-practices
Excessive permissions scope
3 sensitive file(s) and 13 external URL(s)
skills/bright-data-best-practices
Contents
21 skills bundled by this extension
bright-data-best-practices
skill
Why it’s high risk
Hardcoded C2 with exfil/exec behavior
Contacts a hardcoded public IP paired with download/eval/sensitive-access/upload
+5 more findings
proxy
skill
Why it’s high risk
Password-protected archive
Password-protected archive URL: https://brightdata.com/static/brightdata_proxy_ca.zip
agent-onboarding
skill
brand-listening
skill
brd-browser-debug
skill
bright-data-mcp
skill
brightdata-cli
skill
competitive-intel
skill
data-feeds
skill
design-mirror
skill
discover-api
skill
js-sdk-best-practices
skill
live-research
skill
price-comparison
skill
python-sdk-best-practices
skill
rag-pipeline
skill
scrape
skill
scraper-builder
skill
scraper-studio
skill
search
skill
seo-audit
skill
Editions
1- Scanned Aug 4, 2026, 03:33 PM0High Risk