integrated-browser
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- Architectural Security Design: The documentation describes a multi-process architecture (Main, Shared, Renderer) intended to isolate heavyweight Chromium components from the workbench UI, which helps maintain overall application stability and security.
- Trust Boundary Definition: It outlines the use of a preload script within an isolated world to manage communication between web pages and the application. The guide explicitly advises treating page content as untrusted input and maintaining minimal, side-effect-free scripts.
- Privacy and Data Controls: The documentation describes privacy gates and availability gates that manage how and when agents can access page content, including the use of network filters to screen URLs.
- Automation Governance: It details how automation tools like Playwright interact with the browser via CDP (Chrome DevTools Protocol) through a proxy, ensuring that human actions and agent actions are managed cooperatively with clear priority for the user.
Audit Metadata