performance-audit
Pass
Audited by Gen Agent Trust Hub on May 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes vendor-specific command-line interfaces,
ironbee-browser-devtools-cliandironbee-node-devtools-cli, to perform browser automation and connect to Node.js processes for debugging. - [DATA_EXFILTRATION]: The skill accesses network request headers, console logs, and screenshots from target websites, which may contain sensitive information such as session tokens or internal system details.
- [PROMPT_INJECTION]: The skill processes content from external websites (e.g., console messages and HTTP responses) that could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Output from
get-console-messagesandget-http-requestsinSKILL.md. - Boundary markers: Absent; no markers or warnings are used to distinguish external data from system instructions.
- Capability inventory: Interaction with browser sessions and backend process debugging via
ironbee-browser-devtools-cliandironbee-node-devtools-cli. - Sanitization: No sanitization or validation of the retrieved external content is performed before presentation to the agent.
Audit Metadata