browser-pilot

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the Playwright package and Chromium browser using the npm package manager if they are not already present on the local system.
  • [COMMAND_EXECUTION]: Executes shell commands to manage dependencies, verify network connectivity via curl, and initiate local development servers based on repository configuration files like package.json.
  • [DYNAMIC_EXECUTION]: Creates and executes local automation scripts to drive the Playwright browser instance when dedicated platform tools are not available.
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection by processing external data from web pages.
  • Ingestion points: Browser accessibility snapshots, page text, and console logs retrieved from target URLs are processed to determine navigation steps (SKILL.md).
  • Boundary markers: Absent; the instructions do not define specific delimiters to isolate external web content from the agent's logic.
  • Capability inventory: The skill has the ability to execute shell commands (npm, npx, curl, and local dev scripts) and perform file write operations for evidence collection and logging.
  • Sanitization: Absent; there is no explicit instruction to sanitize or validate content extracted from the browser snapshots before use.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 09:19 PM