drissionpage-mcp-browser-automation
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides the
page_evaluatetool which allows for the execution of arbitrary JavaScript within the browser context. This is a primary feature for web automation but represents a dynamic execution surface.- [EXTERNAL_DOWNLOADS]: The installation instructions guide users to download and install thedrissionpage-mcppackage from the official Python Package Index (PyPI).- [DATA_EXFILTRATION]: The skill includes tools to access potentially sensitive browser data. Thebrowser_cookies_gettool can reveal cookie values when theshow_valueparameter is enabled, and thestorage_gettool provides access to local and session storage content.- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests untrusted data from external websites. - Ingestion points: SKILL.md (via navigation and extraction tools like
page_snapshot,element_get_text, andpage_console_logs). - Boundary markers: None explicitly defined in the instructions to separate web content from agent instructions.
- Capability inventory: SKILL.md (includes JavaScript execution via
page_evaluate, file uploads viaelement_upload_file, and navigation viapage_navigate). - Sanitization: No specific sanitization or filtering of external web content is mentioned.
Audit Metadata