wuying-browser-use

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the wuying-agentbay-sdk Python package. This is a legitimate vendor-provided SDK used to interface with the AgentBay browser automation platform.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles natural language task descriptions which are executed by a browser-based agent, creating a surface for potential indirect prompt injection from web content.
  • Ingestion points: The positional task argument in scripts/browser-use.py, which is passed directly to the agent.browser.execute_task function.
  • Boundary markers: There are no explicit delimiters or system instructions to ignore potential commands embedded in the websites being visited.
  • Capability inventory: The script scripts/browser-use.py enables full browser capabilities, including navigation, data extraction, and form interaction.
  • Sanitization: The skill does not perform sanitization or validation of the input task or the data retrieved from external websites.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:36 PM