wuying-browser-use
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
wuying-agentbay-sdkPython package. This is a legitimate vendor-provided SDK used to interface with the AgentBay browser automation platform. - [INDIRECT_PROMPT_INJECTION]: The skill handles natural language task descriptions which are executed by a browser-based agent, creating a surface for potential indirect prompt injection from web content.
- Ingestion points: The positional
taskargument inscripts/browser-use.py, which is passed directly to theagent.browser.execute_taskfunction. - Boundary markers: There are no explicit delimiters or system instructions to ignore potential commands embedded in the websites being visited.
- Capability inventory: The script
scripts/browser-use.pyenables full browser capabilities, including navigation, data extraction, and form interaction. - Sanitization: The skill does not perform sanitization or validation of the input task or the data retrieved from external websites.
Audit Metadata