kernel-browser-harness
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and implementation guidelines for using the author's ('kernel') cloud browser service with an open-source browser automation tool ('browser-harness').
- [EXTERNAL_DOWNLOADS]: The skill references a well-known open-source repository (browser-use/browser-harness) for documentation and installation instructions, which is considered a safe source.
- [COMMAND_EXECUTION]: The shell commands provided (
kernel browsers create,jq,browser-harness) are standard for the intended workflow of driving a cloud browser. The use of temporary files (/tmp/kernel-session.json) and environment variables (BU_NAME,BU_CDP_WS) follows standard development practices. - [CREDENTIALS_UNSAFE]: The skill mentions
KERNEL_API_KEYbut correctly instructs the agent that it is usually handled viakernel loginand does not provide or solicit hardcoded secrets. Placeholders and environment variable references are used appropriately. - [DATA_EXFILTRATION]: No sensitive data access or exfiltration to third-party domains was detected. Network operations are limited to the vendor's CLI and the CDP WebSocket protocol used for browser automation.
Audit Metadata