cdp
Fail
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The setup script (scripts/setup) modifies user shell profile files (~/.zshrc, ~/.bashrc, ~/.profile) to persistently add a new directory to the system PATH.
- [COMMAND_EXECUTION]: The sdk/session.ts file uses osascript on macOS to programmatically simulate keyboard input to automatically dismiss the 'Allow debugging connection?' security prompt in the Dia browser.
- [REMOTE_CODE_EXECUTION]: The skill implements a REPL server in sdk/repl.ts that executes arbitrary JavaScript strings provided via an HTTP POST request using eval().
- [REMOTE_CODE_EXECUTION]: The 'learnings' tool registry in sdk/helpers.ts uses dynamic import() to load and execute JavaScript modules from paths constructed at runtime.
- [DATA_EXFILTRATION]: The action recording feature in sdk/recording.ts captures screenshots and action logs during browser sessions and saves them to the local ~/.browser-harness-js directory.
- [COMMAND_EXECUTION]: The video processing logic in sdk/video-render.ts and sdk/video.ts invokes system binaries including ffmpeg and ffprobe using spawnSync.
Recommendations
- AI detected serious security threats
Audit Metadata