chromium-browser
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides
curlcommand templates inreferences/wayback-machine.mdfor querying the Wayback Machine API. These are standard GET requests used for archive discovery and status checks. - [EXTERNAL_DOWNLOADS]: The skill fetches archived data and web page replays from well-known services hosted at
archive.organdweb.archive.org. - [DYNAMIC_EXECUTION]: The skill utilizes
evaluate_scriptwithinSKILL.mdto execute JavaScript in the browser context. This is used to extract information that is not available in the standard accessibility tree. - [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface for indirect prompt injection because it processes untrusted data from external websites.
- Ingestion points: Web content is ingested into the agent context through
take_snapshotandevaluate_scriptinSKILL.md. - Boundary markers: Absent. The instructions do not provide explicit delimiters or ignore-instructions for the data retrieved from web pages.
- Capability inventory: The skill can execute browser-side scripts (
SKILL.md), write screenshots and data to the local filesystem (SKILL.md), and perform network operations viacurl(references/wayback-machine.md). - Sanitization: Absent. The skill does not define methods for sanitizing or validating web-based content before it is processed by the AI.
Audit Metadata