cicpa-company-query

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/cicpa_query.py automatically installs the playwright Python package and the chromium browser binary using subprocess.run calls to pip and the playwright CLI if they are not detected on the system.
  • [DYNAMIC_EXECUTION]: The SKILL.md instructions require the agent to use playwright-mcp_browser_run_code_unsafe to execute a specific JavaScript snippet in the browser context to extract authentication cookies. While functional for the skill's purpose, this utilizes an unconstrained code execution vector.
  • [EXTERNAL_DOWNLOADS]: The skill initiates a significant download (approximately 100MB) of the Chromium browser binary via playwright install chromium if a compatible system browser is not located.
  • [DATA_EXPOSURE]: The script scripts/cicpa_query.py performs discovery of the host filesystem by checking for the presence of various browser installation paths (e.g., in /Applications/, C:\Program Files\, etc.) across multiple operating systems.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 05:27 AM
Security Audit — agent-trust-hub — cicpa-company-query