screenshotting-apps

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the agent-browser utility from the npm registry as a prerequisite for its browser automation features.
  • [EXTERNAL_DOWNLOADS]: References code and guidelines from Vercel Labs' public repositories for browser interaction logic.
  • [COMMAND_EXECUTION]: Leverages the agent-browser CLI to execute navigation commands, interact with DOM elements, and capture screenshots of targeted web pages.
  • [COMMAND_EXECUTION]: Uses the eval capability of the browser controller to inject and run the references/annotate.js script, which dynamically creates SVG overlays for documentation purposes.
  • [CREDENTIALS_UNSAFE]: Facilitates the persistence of browser authentication data (such as session cookies) by saving the browser state to a local auth.json file, enabling access to authenticated sections of web applications.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 05:33 PM
Security Audit — agent-trust-hub — screenshotting-apps