agent-desk
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions frequently use local script execution commands (e.g.,
node scripts/browser.js) to drive browser automation and interact with the dashboard API. - [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to read and follow guidance embedded in the webpage DOM via the
[data-testid="llm-instructions"]element. This creates a surface where external content could influence agent behavior. - Ingestion points: The agent reads content from
document.querySelector('[data-testid="llm-instructions"]').textContentas described inSKILL.md. - Boundary markers: None identified; the agent is instructed to read and use the text directly.
- Capability inventory: The skill uses
playwright-cliandnodeto executeevalstatements and shell commands. - Sanitization: None identified; the instructions are treated as valid guidance.
- [DYNAMIC_EXECUTION]: The skill's core functionality relies on generating and executing JavaScript snippets via
evalwithin the context of a browser session to perform data operations.
Audit Metadata