download-smbc-card-statements
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a Node.js script to automate browser interactions. It requires the agent to execute a local script path to perform navigation, selection, and download tasks.
- [DATA_EXFILTRATION]: The script accesses the local DevToolsActivePort file in the Chrome user data directory to identify the port and path needed to connect to the browser's debugging interface. This is a necessary step for local browser automation and does not involve sending data to external servers.
- [DYNAMIC_EXECUTION]: The skill employs Runtime.evaluate to run JavaScript within the browser context to interact with the website's interface. The evaluated code is static and used for navigating the bank's portal and triggering download links.
Audit Metadata