web-agent
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the
agent-browser skills get core --fullcommand to fetch and load operational guidelines from the tool's registry. - [COMMAND_EXECUTION]: The skill utilizes a browser automation CLI (
agent-browser) to perform tasks like listing profiles, managing sessions, and opening URLs. - [INDIRECT_PROMPT_INJECTION]: As a browser automation agent, it ingests data from external websites. The skill incorporates mitigation strategies by requiring interactive, user-led authentication and instructions to treat session data as opaque to prevent unauthorized data access.
- [DATA_EXPOSURE]: The skill interacts with
~/agent-browser.config.txtto read and persist session-related metadata, such as session names and profile settings, which is standard for CLI tool configuration.
Audit Metadata