puppeteer
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions to install
puppeteerandpuppeteer-corevia npm. These are official packages from Google, a recognized trusted organization. - [COMMAND_EXECUTION]: The guide contains JavaScript examples for controlling a headless browser. This includes launching browser processes and executing scripts within the page context (
page.evaluate), which are standard operations for this library. - [DATA_EXFILTRATION]: Examples demonstrate how to capture screenshots, generate PDFs, and extract page content such as text, cookies, and local storage. These capabilities are described neutrally as features for web scraping and automation.
- [CREDENTIALS_UNSAFE]: The skill includes code snippets showing how to handle authentication and session tokens using generic placeholder values (e.g., 'user', 'pass', 'mytoken'). No actual secrets or sensitive hardcoded credentials are included.
Audit Metadata