browser-qa
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes content from external, user-supplied URLs to perform QA audits. This creates an indirect prompt injection surface where instructions or data embedded in a target website could attempt to influence the agent's behavior.
- Ingestion points: External web pages and target URLs (SKILL.md).
- Boundary markers: None present to delimit untrusted web content.
- Capability inventory: Browser navigation, form submission, and screenshot capture via MCP tools (SKILL.md).
- Sanitization: No explicit sanitization of page content or console logs mentioned.
- [COMMAND_EXECUTION]: The skill utilizes browser automation frameworks (Playwright, Puppeteer) and specialized MCP tools to execute interactions and scripts within a browser environment.
Audit Metadata