tabbit

Pass

Audited by Gen Agent Trust Hub on Nov 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a local command-line interface (tabbit-cli) to manage task-isolated browser workspaces. It provides explicit paths for macOS, Linux, and Windows installations and includes rigorous validation steps for identifying legitimate browser instances through registry and file system checks.
  • [DYNAMIC_EXECUTION]: The agent generates and executes JavaScript snippets using the Playwright framework within a persistent Node.js realm. These scripts are used for navigation, form submission, and data extraction, following established safety 'recipes' that emphasize bounding loops and returning compact, JSON-safe results.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external web content, which presents a surface for indirect injection attacks.
  • Ingestion points: Web page content, DOM elements, and ARIA snapshots accessed via Playwright.
  • Boundary markers: Instructions explicitly require bounding result sizes, deduplicating data, and verifying output consistency before returning information to the agent context.
  • Capability inventory: The skill allows for file writing to local artifact directories (artifactPath) and standard browser-based network interactions.
  • Sanitization: Guidelines enforce the extraction of specific fields and the use of semantic locators to minimize the ingestion of malicious or irrelevant web data.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 7, 2026, 01:49 AM