browser-automation
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is focused on browser automation and web scraping, which creates a vulnerability surface for indirect prompt injection where instructions hidden in web content could influence agent behavior.
- Ingestion points: External web content retrieved during automation and scraping tasks (SKILL.md).
- Boundary markers: No delimiters or specific instructions are provided to help the agent distinguish between scraped data and system instructions.
- Capability inventory: The skill utilizes UI automation and data extraction capabilities via tools like Playwright and Puppeteer.
- Sanitization: The instructions do not include methods for sanitizing or escaping content retrieved from the web before it is processed by the agent.
Audit Metadata