dp-console-admin
Fail
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: HIGHCREDENTIALS_UNSAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The script
scripts/dp_console_admin.pycontains a hardcoded default enterprise password (Deepexi@2026) assigned as a fallback for theENTERPRISE_PASSvariable. This fallback credential could lead to unauthorized access if environment variables are not configured. - [COMMAND_EXECUTION]: The skill executes an external Google Chrome process with the
--remote-debugging-portflag enabled usingsubprocess.Popen. This opens a debugging port on the local system that could potentially be accessed by other processes to control the browser. - [DYNAMIC_EXECUTION]: The script uses the Chrome DevTools Protocol (CDP) to inject and execute dynamically constructed JavaScript code in the browser context via the
Runtime.evaluatemethod. This allows the tool to make authenticated API requests by inheriting the security context (cookies and CSRF tokens) of the logged-in browser session.
Recommendations
- AI detected serious security threats
Audit Metadata