dev-browser

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands via execSync and execFileSync to manage the local environment. Specifically, it identifies and terminates stale server processes occupying network ports and uses AppleScript (osascript) on macOS to handle application focus switching. These actions are limited to local process and window management.
  • [EXTERNAL_DOWNLOADS]: The startup script is configured to automatically download and install the Chromium browser via the Playwright CLI (playwright install chromium) if it is not already present on the system. This download originates from Microsoft's official Playwright distribution.
  • [REMOTE_CODE_EXECUTION]: The skill provides tools such as browser_evaluate and browser_script that allow for the execution of arbitrary JavaScript code within the browser instance. This is a core feature of browser automation, enabling the agent to handle complex web logic and data extraction.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 02:59 AM