browser-agent-verify

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes git diff to identify modified routes and components, and uses npm run dev to ensure the local development server is active.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx playwright install to set up the browser automation environment. Playwright is a well-known, industry-standard tool maintained by a trusted organization.
  • [DYNAMIC_EXECUTION]: The agent dynamically generates a temporary JavaScript file (/tmp/playwright-verify.js) to perform specific UI interactions and assertions. This script is generated from instructions within the skill and executes against localhost.
  • [PROMPT_INJECTION]: The skill processes user-provided targets through $ARGUMENTS, which is a standard pattern for passing parameters to an agent skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 10:35 AM
Security Audit — agent-trust-hub — browser-agent-verify