competitor-analysis
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill relies on the
browseCLI, an established tool provided by Browserbase for web automation and data retrieval. Operations are conducted through documented API calls and standard shell utilities. - [SAFE]: The provided JavaScript scripts (e.g.,
compile_report.mjs,merge_partials.mjs,capture_screenshots.mjs) implement strict path validation using functions likesafeCliPathandsanitizePathSegments, effectively preventing directory traversal vulnerabilities. - [SAFE]: HTML report generation includes appropriate escaping and sanitization of externally sourced data to mitigate potential cross-site scripting (XSS) or injection issues when rendering competitor information.
- [SAFE]: Secret management follows industry best practices by requiring the
BROWSERBASE_API_KEYto be provided as an environment variable rather than hardcoding credentials or prompting for them within scripts. - [SAFE]: The multi-agent workflow is well-defined with clear boundaries, using subagents for data processing and synthesis while maintaining the main agent's oversight.
Audit Metadata