browser-pilot
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the Playwright package and Chromium browser using the npm package manager if they are not already present on the local system.
- [COMMAND_EXECUTION]: Executes shell commands to manage dependencies, verify network connectivity via
curl, and initiate local development servers based on repository configuration files likepackage.json. - [DYNAMIC_EXECUTION]: Creates and executes local automation scripts to drive the Playwright browser instance when dedicated platform tools are not available.
- [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection by processing external data from web pages.
- Ingestion points: Browser accessibility snapshots, page text, and console logs retrieved from target URLs are processed to determine navigation steps (SKILL.md).
- Boundary markers: Absent; the instructions do not define specific delimiters to isolate external web content from the agent's logic.
- Capability inventory: The skill has the ability to execute shell commands (
npm,npx,curl, and local dev scripts) and perform file write operations for evidence collection and logging. - Sanitization: Absent; there is no explicit instruction to sanitize or validate content extracted from the browser snapshots before use.
Audit Metadata