camoufox-setup

Warn

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/setup_check.py utilizes the subprocess.run function to execute multiple installation and environment probing commands. These include pip install for Python dependencies, npm install for Node.js tools, and the camoufox CLI for binary management.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of software components from external sources that are not categorized as trusted vendors. This includes the camoufox package from PyPI and a custom, patched Firefox browser binary downloaded via the camoufox fetch command from the project's own infrastructure.
  • [PRIVILEGE_ESCALATION]: The skill's documentation in SKILL.md and references/toolchain.md advises the user or agent to use sudo for administrative tasks, such as installing system-level packages like xvfb via apt-get or performing global NPM installations if standard permissions are insufficient.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 2, 2026, 05:36 AM
Security Audit — agent-trust-hub — camoufox-setup