browser-tools
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the
upgradecommand (v0.21.1) in the underlyingagent-browsertool, which enables self-updating from public registries including npm, Homebrew, and Cargo. - [EXTERNAL_DOWNLOADS]: It recommends the installation of the
portlessutility via npm for managing stable local development environments. - [COMMAND_EXECUTION]: The skill is designed to guide the agent in using the
agent-browserCLI tool for web interaction, navigation, and data extraction. - [COMMAND_EXECUTION]: It identifies potentially sensitive commands such as
inspectandget cdp-url(v0.18+) which open a local DevTools proxy, andclipboard read(v0.19+) which accesses the host clipboard. - [DATA_EXFILTRATION]: The skill provides explicit rules to prevent session token leakage via HAR network captures (
network har stop) and warns against logging or printing authentication tokens to stdout/stderr.
Audit Metadata