agent-browser-helper

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script chrome.sh executes local browser binaries (such as google-chrome or chromium) to start a managed instance. It uses an array-based execution method to safely pass arguments, protecting against shell injection.
  • [EXTERNAL_DOWNLOADS]: The documentation references the installation of the agent-browser CLI from Vercel Labs, which is a trusted organization. No unverified remote code is downloaded or executed.
  • [SAFE]: The skill manages local files in ~/.agent-browser-helper to track process IDs (PID) and store browser profiles, including cookies and history, which is necessary for the stated purpose of maintaining persistent sessions.
  • [SAFE]: The configuration includes the --no-sandbox flag by default. While this reduces browser-level security by disabling the sandbox, it is a common requirement for running browsers in containerized or restricted automation environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 09:26 AM