tabbit-devtools
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/run_agent_browser_on_tabbit.pyusessubprocess.runto execute theagent-browsertool. This is the primary mechanism for the skill to perform browser automation tasks as requested by the user. - [EXTERNAL_DOWNLOADS]: The skill is configured to use
npxto download and execute theagent-browserpackage from the npm registry if it is not already installed locally. This package is maintained by Vercel Labs, a well-known and reputable organization. - [DATA_EXPOSURE]: To facilitate the connection, the skill reads the
DevToolsActivePortfile from the user's application support directory (~/Library/Application Support/Tabbit/). This is necessary to discover the dynamically assigned WebSocket endpoint required for Chromium-based browser debugging.
Audit Metadata