web-form-fill
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses camoufox-cli to automate browser tasks such as navigating to web forms, entering text into fields, and clicking interaction elements.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it interprets labels and instructions from external web pages to determine how to populate form fields.
- Ingestion points: The agent gathers page structure and field requirements through browser snapshots.
- Boundary markers: No explicit delimiters are used to separate external web content from the agent's internal instructions.
- Capability inventory: The agent can perform browser actions (click, type, upload) and execute JavaScript fallbacks for complex form elements.
- Sanitization: No specific input validation or sanitization of web-derived strings is described.
- Mitigation: The skill mandates that the agent must not submit forms autonomously and must instead ask the user for confirmation and any missing information, preventing potentially malicious web content from triggering unauthorized actions.
Audit Metadata