dev-browser
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands via
execSyncandexecFileSyncto manage the local environment. Specifically, it identifies and terminates stale server processes occupying network ports and uses AppleScript (osascript) on macOS to handle application focus switching. These actions are limited to local process and window management. - [EXTERNAL_DOWNLOADS]: The startup script is configured to automatically download and install the Chromium browser via the Playwright CLI (
playwright install chromium) if it is not already present on the system. This download originates from Microsoft's official Playwright distribution. - [REMOTE_CODE_EXECUTION]: The skill provides tools such as
browser_evaluateandbrowser_scriptthat allow for the execution of arbitrary JavaScript code within the browser instance. This is a core feature of browser automation, enabling the agent to handle complex web logic and data extraction.
Audit Metadata