agent-browser-electron
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, exfiltration attempts, or obfuscated code were detected in the skill instructions or metadata.
- [COMMAND_EXECUTION]: The skill instructs the agent to use
curlandagent-browserto communicate with the local CDP server at127.0.0.1. These operations are standard for Electron debugging and are confined to the local loopback interface. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface. 1. Ingestion points:
agent-browser snapshot,agent-browser console, andagent-browser errorsinSKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: Browser automation (navigation, interaction) via theagent-browsertool. 4. Sanitization: Absent. This surface is an inherent part of browser automation and debugging, and given the local context and lack of host-level execution capabilities for the ingested data, it is considered safe.
Audit Metadata