ego-browser
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/install.shscript downloads the ego lite browser DMG from the official domaincdn.ego.app. This is the core component of the skill and the source is consistent with the vendor identity. - [COMMAND_EXECUTION]: The installation script uses standard macOS system utilities (
hdiutil,ditto,xattr,open) to mount, install, and launch the application. These operations are restricted to the application bundle and its installation path. - [COMMAND_EXECUTION]: The skill uses
ego-browser nodejsto execute Node.js scripts via shell heredocs. This is the intended design for providing an execution environment for browser automation. - [DATA_EXPOSURE]: The skill documentation explicitly notes that the browser environment 'reuses the user's login state'. This is a disclosed core feature to allow agents to operate on authenticated websites.
Audit Metadata