xpai-doubao-web
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION] (MEDIUM): Potential path traversal vulnerability in session management. The
sessionIdparameter is used to construct file paths viapath.join(dataDir, 'profiles', args.sessionId)without sanitization, which could allow an attacker to point to directories outside the intended profiles folder. - [DATA_EXFILTRATION] (MEDIUM): Local File Inclusion (LFI) risk via the
--promptfilesflag. The script reads arbitrary local files provided by the user and incorporates their content into the prompt sent to the external Doubao service, potentially exposing sensitive local system information. - [DATA_EXFILTRATION] (LOW): The skill intentionally accesses and stores browser cookies in the local application data directory to authenticate with Doubao Web. This is a core function protected by a manual consent prompt.
- [COMMAND_EXECUTION] (LOW): Uses Playwright to automate a web browser, which involves executing browser binaries and performing network operations.
- [EXTERNAL_DOWNLOADS] (LOW): Requires external dependencies and browser binaries from Microsoft (Playwright), which is a trusted source.
- [PROMPT_INJECTION] (LOW): The skill processes untrusted prompt data from files without explicit boundary markers or sanitization, creating a surface for indirect prompt injection targeting the downstream LLM.
Audit Metadata