agent-browser
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard browser automation capabilities via a CLI wrapper. Features include navigation, form interaction, screenshots, and PDF generation.
- [SAFE]: The skill uses a 'refs' system (@e1, @e2) to provide a compact representation of the DOM, reducing token usage for the agent without introducing new security risks.
- [SAFE]: Session management and authentication state persistence (saving/loading auth-state.json) are handled using standard file system operations. Documentation explicitly warns users never to commit these state files to version control as they contain sensitive session tokens.
- [SAFE]: Browser settings (viewport, device emulation, geolocation) and network routing (mocking/aborting) are standard features of browser automation tools like Playwright or Puppeteer.
- [SAFE]: Proxy support correctly utilizes standard environment variables (HTTP_PROXY, ALL_PROXY, etc.) and provides clear guidance on handling authenticated proxies safely.
- [SAFE]: The skill includes security best practices documentation, advising the use of environment variables for credentials and proper cleanup of sessions and state files.
Audit Metadata