camoufox
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinscripts/launch.pyto identify the installation path of thecamoufoxlibrary and executes shell commands to launch browser instances and generate configuration files forplaywright-cli. - [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to visit external websites and read page content. This creates an attack surface where instructions embedded in untrusted web data could influence agent behavior.
- Ingestion points: Browser navigation and page snapshots (
playwright-cli snapshot) as described inSKILL.md. - Boundary markers: None identified; untrusted page content is processed without explicit delimiters or instructions to ignore embedded commands.
- Capability inventory: File system access for profile management, shell command execution in
scripts/launch.py, and full browser automation via Playwright. - Sanitization: No evidence of content filtering or sanitization before external data is processed by the agent.
Audit Metadata