cicpa-company-query
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/cicpa_query.pyautomatically installs theplaywrightPython package and thechromiumbrowser binary usingsubprocess.runcalls topipand theplaywrightCLI if they are not detected on the system. - [DYNAMIC_EXECUTION]: The
SKILL.mdinstructions require the agent to useplaywright-mcp_browser_run_code_unsafeto execute a specific JavaScript snippet in the browser context to extract authentication cookies. While functional for the skill's purpose, this utilizes an unconstrained code execution vector. - [EXTERNAL_DOWNLOADS]: The skill initiates a significant download (approximately 100MB) of the Chromium browser binary via
playwright install chromiumif a compatible system browser is not located. - [DATA_EXPOSURE]: The script
scripts/cicpa_query.pyperforms discovery of the host filesystem by checking for the presence of various browser installation paths (e.g., in/Applications/,C:\Program Files\, etc.) across multiple operating systems.
Audit Metadata