chromium-browser
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from the internet and external APIs, creating a vulnerability surface for malicious instructions embedded in third-party data.\n
- Ingestion points: Untrusted content from rendered Chromium pages and API responses from the Wayback Machine (archive.org).\n
- Boundary markers: Explicit instructions to "Inspect only pages relevant to the task" and suppress unrelated tab titles.\n
- Capability inventory: Broad browser control capabilities including
evaluate_script,click, andfill_form.\n - Sanitization: Requirements to summarize large
evaluate_scriptoutputs, paginate high-volume console/network logs, and filter results.\n- [EXTERNAL_DOWNLOADS]: The skill fetches capture data from the Internet Archive's Wayback Machine (archive.org) via curl for discovery and replay research. This interaction targets a well-known service and is documented neutrally.\n- [COMMAND_EXECUTION]: Utilizes system utilities includingcurlfor API requests to local and remote endpoints, andplutilfor verifying Chromium version metadata on macOS as part of its troubleshooting workflow.
Audit Metadata