stagehand

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation refers to the installation of the @browserbasehq/stagehand package via npm. This package is the official framework for Stagehand, a recognized browser automation service from BrowserBase, and its inclusion is standard for the skill's stated purpose.
  • [SAFE]: The skill explicitly instructs developers to use the variables parameter and environment variables (process.env) for handling credentials. This is a secure practice that prevents sensitive data like passwords and API keys from being directly interpolated into the natural language instructions sent to LLMs.
  • [SAFE]: The skill includes instructions for structured data extraction using JSON schemas. This method provides a level of validation for data ingested from untrusted web pages, which helps mitigate risks associated with processing unstructured or malicious external content.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 09:20 AM
Security Audit — agent-trust-hub — stagehand