antithesis-triage
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
agent-browsertool fromvercel-labs, which is a recognized and trusted source.\n- [COMMAND_EXECUTION]: The skill utilizes browser automation to run JavaScript scripts that extract data from bug reports. This is the primary intended functionality of the skill.\n- [PROMPT_INJECTION]: The skill ingests untrusted content from bug logs and report descriptions, which is a necessary step for bug triage.\n - Ingestion points: Report and log data collected from the browser DOM in
assets/logs/read-visible-events.jsandassets/report/findings-grouped.js.\n - Boundary markers: None identified.\n
- Capability inventory: Includes browser navigation and script evaluation via the
agent-browsertool.\n - Sanitization: Data is trimmed of whitespace but is otherwise processed as raw text for the agent's analysis.
Audit Metadata