camofox-browser
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the Camoufox browser engine and the yt-dlp utility from official GitHub repositories. It also facilitates a plugin system that can install code from external URLs provided by the user.
- [COMMAND_EXECUTION]: The application executes shell commands and subprocesses to manage the browser engine, VNC server, and transcript extraction tools. These operations are restricted to specific modules as per the skill's own internal security guidelines.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the web, creating a potential surface for indirect prompt injection attacks.
- Ingestion points: Browser navigation via
POST /tabsandnavigateendpoints, as well as cookie imports. - Boundary markers: None explicitly mentioned to separate fetched web content from agent instructions in the prompt templates.
- Capability inventory: File system access (session persistence), subprocess management (browser engine), and network requests.
- Sanitization: Validates cookie fields against a safe allowlist and implements path traversal checks for local file access.
Audit Metadata