browsing-as-you

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The chrome-agent.sh script and cdp.py utilize shell commands and subprocess calls to manage the Chrome process, perform health checks using lsof and pgrep, and retrieve the 'Chrome Safe Storage' decryption key from the macOS keychain via the security utility. It also handles the installation of a macOS LaunchAgent to provide optional autostart persistence at login.
  • [CREDENTIALS_UNSAFE]: The skill implements a 'seeding' mechanism that reads and decrypts local Chrome cookies to maintain user sessions across restarts. These operations are performed locally, and the script includes logic to redact decrypted cookie values and absolute file paths from its internal diagnostic logs.
  • [EXTERNAL_DOWNLOADS]: Integration instructions refer to the chrome-devtools-mcp package, which is installed from the well-known npm registry via npx to provide Model Context Protocol (MCP) capabilities.
  • [DATA_EXFILTRATION]: The gh-attach command facilitates the upload of local files to GitHub's public attachment infrastructure. This functionality is a documented feature designed to generate markdown URLs for use in GitHub issues and PRs, targeting the trusted github.com domain.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 01:12 AM
Security Audit — agent-trust-hub — browsing-as-you