kernel-typescript-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides the
kernel.browsers.playwright.execute()method, which sends JavaScript or TypeScript code strings to be executed on a remote server. This is the primary mechanism for low-latency, server-side browser automation within the Kernel ecosystem. - [DYNAMIC_EXECUTION]: The
playwright.executemethod dynamically evaluates the string provided in thecodeparameter. This allows the agent to generate and run automation scripts at runtime. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill enables the agent to navigate to and process content from arbitrary websites using
page.goto()and high-level automation libraries like Stagehand and Magnitude, as seen inexamples/examples.md. - Boundary markers: The skill does not include specific boundary markers or instructions to ensure that the agent ignores commands or instructions embedded within the third-party web content it processes.
- Capability inventory: The skill includes powerful capabilities such as server-side code execution, file system access via
kernel.browsers.fs.readFile(), and session management including profiles and proxies. - Sanitization: There is no evidence of sanitization, validation, or filtering of external data before it is used to drive the agent's automation logic or code generation.
- [COMMAND_EXECUTION]: The documentation in
SKILL.mdinstructs the user to performnpm installcommands for the@onkernel/sdkandplaywright-corepackages.
Audit Metadata