Gen Agent Trust Hub

agent-browser · qu-skills/superpowers

Passed

Provider summary

The skill provides browser automation capabilities using Playwright via the belt CLI. It allows navigating websites, interacting with elements, taking screenshots, and executing JavaScript. While powerful, it introduces risks typical for browser agents, including potential indirect prompt injection from malicious websites and the ability to extract cookies or upload local files. The documentation encourages security best practices like using environment variables for credentials.

The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.

Interpretation

Compare the repository, publisher, and installation command before continuing.

Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.

Use the narrowest possible scope and avoid broad credentials for third-party skills.