antithesis-agent-browser

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed to interact with Antithesis web pages for legitimate triage and debugging purposes. It utilizes agent-browser for navigation and a local JavaScript runtime (assets/antithesis-agent-browser.js) for data extraction. All network activity is directed to official Antithesis domains.
  • [SAFE]: External dependencies, including agent-browser (from the trusted Vercel Labs organization) and jq, are referenced via their official documentation and installation guides. No unverified remote code execution patterns were detected.
  • [SAFE]: The authentication process is handled securely through an interactive headed browser session that requires user presence and confirmation, preventing automated session hijacking. Browser sessions are isolated using unique session identifiers for each task.
  • [SAFE]: File operations in the utility script assets/download-logs-from-url.sh are restricted to downloading log data to user-specified paths, supporting the skill's primary function without unauthorized file system access.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 11:17 PM