rust-browser-pilot
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes an 'evaluate' tool which allows the execution of arbitrary JavaScript code within the browser context. This is a core feature for browser automation but allows for extensive interaction with the page's environment.
- [DATA_EXFILTRATION]: Tools like 'get_cookies' and 'get_local_storage' provide access to sensitive browser session data, such as authentication tokens and persistent storage. While necessary for session management, this capability allows an agent to access private user data.
- [EXTERNAL_DOWNLOADS]: The skill's installation process utilizes 'cargo' and 'homebrew' to download binary packages and dependencies from their respective official registries.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8). It ingests untrusted data from external websites via the 'get_markdown' and 'snapshot' tools. Maliciously crafted web content could contain hidden instructions aimed at influencing the agent's behavior. The skill uses libraries like Mozilla Readability and 'html2md' to sanitize content, which mitigates some risks, but the surface remains present.
Audit Metadata