browser-test
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill interacts with untrusted external websites, creating an indirect prompt injection surface (Ingestion points:
browser_open,browser_get-textinSKILL.md). Mitigation is present through the mandatory use of theaidefence_is_safesafety gate which serves as a boundary marker and sanitization step before content is processed by the agent. Capability inventory includesBash,Write, andbrowser_evalas specified inSKILL.md. \n- [COMMAND_EXECUTION]: The skill references framework-specific commands such astrajectory-end,rvf compact, and/ruflo-browser replayfor managing test session lifecycle and artifacts. \n- [REMOTE_CODE_EXECUTION]: The skill utilizesbrowser_evalfor executing JavaScript assertions within the browser context, which is standard functionality for automated UI testing tools.
Audit Metadata