reverse-browser-automation
Warn
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions for the on-demand bootstrap of the
OpenReverseframework, which involves cloning an external third-party repository (github.com/zhexulong/openreverse.git) and executingnpm installfollowed by various initialization scripts (npm run init:agents). - [EXTERNAL_DOWNLOADS]: Facilitates the installation of the
agent-browserpackage from NPM and the automated download of browser binaries vianpx playwright install. - [DATA_EXFILTRATION]: Provides specific Node.js code templates designed to extract sensitive information from browser sessions, including session cookies and
localStoragecontents. - [DYNAMIC_EXECUTION]: Encourages the creation and execution of custom Node.js scripts for Playwright that perform advanced interactions such as intercepting network requests, modifying API responses, and injecting payloads into web pages.
- [COMMAND_EXECUTION]: The skill uses
agent-browserandOpenReverse(UIA/CUA modes) to drive interactions with system applications, which allows for the automation of high-privilege tools such as debuggers (x64dbg), disassemblers (IDA Pro), and network analyzers (Wireshark).
Audit Metadata