awawausb-webusb-firefox
Warn
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download an extension (
.xpi) and a platform-specific native stub archive from a third-party GitHub repository (https://github.com/ArcaneNibble/awawausb). - [REMOTE_CODE_EXECUTION]: The installation process involves downloading a binary and executing provided scripts (
install.sh,install.bat) or building a binary from source usinggit cloneandcargo buildon code from an external source. - [COMMAND_EXECUTION]: The skill provides several shell scripts (Bash and PowerShell) that perform file system writes and directory creation in sensitive application data paths.
- [PERSISTENCE]: The provided scripts configure Firefox 'Native Messaging Hosts'. This is a persistence mechanism that allows the browser extension to automatically launch the native binary whenever requested, granting the binary long-term execution capabilities on the host system.
- [PRIVILEGE_ESCALATION]: The Windows PowerShell script modifies the Windows Registry (
HKCU:\SOFTWARE\Mozilla\NativeMessagingHosts\awawausb_native_stub) to register the native messaging host, which changes the execution environment for the browser extension.
Audit Metadata