agent-browser
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill manages the installation of required Chromium browser binaries using the
npx agent-browser installcommand. - [COMMAND_EXECUTION]: Includes an
evalcommand to execute JavaScript within the browser context, which is intended for advanced page interaction and data extraction. - [PROMPT_INJECTION]: As the skill interacts with live web content, it is subject to indirect prompt injection risks. This is addressed by the tool's use of compact accessibility-tree snapshots and element references (@e1, @e2) which focus on structural data rather than raw text processing.
- [DATA_EXFILTRATION]: Provides features for saving and loading browser session states (cookies and localStorage). The documentation includes security best practices, such as excluding state files from version control and using environment variables for credentials.
Audit Metadata