agent-browser
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and process content from arbitrary external websites, creating a surface for indirect prompt injection.
- Ingestion points: The scraping scripts provided in
scripts/playwright_scrape.jsandscripts/playwright_scrape.pyretrieve the full HTML content of target pages usingpage.content(). - Boundary markers: The instructions do not specify any delimiters or safety prompts to prevent the agent from interpreting instructions that might be embedded in the scraped HTML.
- Capability inventory: The skill provides full browser automation capabilities via Playwright and Puppeteer, allowing the agent to perform actions on target websites.
- Sanitization: Raw page content is returned directly to the agent's context without any filtering or sanitization of potential injection vectors.
Audit Metadata