agent-browser
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute browser automation commands via a CLI tool and shell. This functionality is intended for programmatic web interaction.
- [REMOTE_CODE_EXECUTION]: The skill provides an
evalcommand that allows the execution of JavaScript within the browser environment. This is a primary feature for complex data extraction and interaction, and the documentation provides methods to use it securely via stdin or Base64 encoding. - [EXTERNAL_DOWNLOADS]: The skill references the use of
npxandappiumfor package execution and mobile device automation. These are standard development tools and are used as intended for the skill's functionality. - [PROMPT_INJECTION]: The skill acknowledges the risk of indirect prompt injection from web content. It provides a specific mitigation feature called
--content-boundariesthat wraps tool output in nonces to help the agent differentiate between its instructions and untrusted page content. The ingestion points include theopen,snapshot, andgetcommands, while capabilities include browser-basedevaland file writing (screenshots).
Audit Metadata