browser-automation
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill focuses on browser automation and web scraping, which naturally involves the ingestion of untrusted data from external websites.
- Ingestion points: Content from external websites accessed and processed via Playwright or Puppeteer (SKILL.md).
- Boundary markers: There are no instructions provided to use delimiters or to ignore potential instructions embedded within the scraped web content.
- Capability inventory: The skill enables web-scraping, headless browser control, and UI automation (SKILL.md).
- Sanitization: The instructions lack specific guidance on sanitizing, validating, or filtering data retrieved from external sources before the agent processes it.
- [NO_CODE]: This skill consists entirely of markdown instructions and metadata, containing no executable scripts or binary files.
Audit Metadata