steel-orchestrator-remote-control
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with the Steel Orchestrator API using standard
curlcommands. The target host is dynamically set via theSTEEL_ORCHESTRATOR_HOSTenvironment variable, which is a secure and standard practice for orchestrator management. There are no signs of hardcoded credentials, data exfiltration, or unauthorized file access. - [SAFE]: The browser attachment process involves connecting to a WebSocket endpoint using the
agent-browserCLI tool. This is a functional requirement for the skill's stated purpose and does not involve the execution of untrusted remote code or binary downloads from unknown sources. - [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation attempts were found in the provided files. The instructions are clear and match the declared functionality in the metadata.
Audit Metadata