x9-browser-session
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill configures the
chrome-devtools-mcpserver to be fetched from the NPM registry usingnpx. - [REMOTE_CODE_EXECUTION]: The skill uses
npx -y chrome-devtools-mcp@latestto execute code from an external package registry during the initialization of browser control tools. - [COMMAND_EXECUTION]: The skill provides AppleScript to create a browser launcher and a Bash script (
agent-edge) to wrap theagent-browsertool. The Bash script includes checks usinglsofandpsto ensure the debugging port is attached to the correct profile. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external websites, which acts as an ingestion point for untrusted content. It includes instructions to maintain isolation via background tabs and prevents the browser from stealing focus.
- [CREDENTIALS_UNSAFE]: The skill instructions and setup scripts interact with the user's authenticated Microsoft Edge profile located at
~/Library/Application Support/Microsoft Edge Automation. The skill provides specific guidelines to ensure session data and credentials are not exfiltrated into prompts or repository files.
Audit Metadata