browsing-as-you
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The
chrome-agent.shscript andcdp.pyutilize shell commands and subprocess calls to manage the Chrome process, perform health checks usinglsofandpgrep, and retrieve the 'Chrome Safe Storage' decryption key from the macOS keychain via thesecurityutility. It also handles the installation of a macOS LaunchAgent to provide optional autostart persistence at login. - [CREDENTIALS_UNSAFE]: The skill implements a 'seeding' mechanism that reads and decrypts local Chrome cookies to maintain user sessions across restarts. These operations are performed locally, and the script includes logic to redact decrypted cookie values and absolute file paths from its internal diagnostic logs.
- [EXTERNAL_DOWNLOADS]: Integration instructions refer to the
chrome-devtools-mcppackage, which is installed from the well-known npm registry vianpxto provide Model Context Protocol (MCP) capabilities. - [DATA_EXFILTRATION]: The
gh-attachcommand facilitates the upload of local files to GitHub's public attachment infrastructure. This functionality is a documented feature designed to generate markdown URLs for use in GitHub issues and PRs, targeting the trustedgithub.comdomain.
Audit Metadata