build-kernel-ts-sdk
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The documentation demonstrates the use of the
playwright.executeandprocess.execfunctions to run JavaScript or shell scripts within remote browser VMs, which is a core architectural feature for reducing latency in automation tasks. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
@onkernel/sdkpackage and related tools, and it provides instructions for thekernel deploycommand to upload local source code to the vendor's cloud platform. - [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface as it is designed to visit and process content from untrusted external websites.
- Ingestion points: Data entering the agent context via
page.goto,page.content, andpage.extractin various example files. - Boundary markers: No explicit delimiters or boundary markers for untrusted web data are shown in the provided code snippets.
- Capability inventory: The skill documentation describes extensive capabilities including file system access (
browsers.fs.*), network operations (browsers.curl), and dynamic code execution within isolated browser environments. - Sanitization: The provided examples do not include explicit sanitization or validation of content retrieved from the web.
Audit Metadata