webapp-testing
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The helper script
scripts/with_server.pyis used to execute arbitrary shell commands provided via the--serverargument. While intended for starting development servers, it allows for general command execution on the host system. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it ingests untrusted data from web applications.
- Ingestion points: The agent reads web page content through
page.content()and element inspection. - Boundary markers: No delimiters or instructions are used to separate untrusted web content from system instructions.
- Capability inventory: The skill can execute arbitrary shell commands via
scripts/with_server.pyand write files to the local system (e.g., screenshots). - Sanitization: There is no evidence of sanitization of the content retrieved from the web applications before processing.
Audit Metadata