wxt-extension-development

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill and its associated scripts were analyzed and no malicious patterns, prompt injections, or data exfiltration attempts were detected.
  • [COMMAND_EXECUTION]: The skill includes two Python scripts: inspect-wxt-project.py and resolve_skill_dir.py. These scripts are used to analyze the structure and metadata of a local WXT project (e.g., reading package.json and configuration files). They do not perform network operations, access sensitive credentials, or execute arbitrary code from untrusted sources.
  • [EXTERNAL_DOWNLOADS]: The skill refers to official WXT documentation and common community packages. No silent or forced downloads of executable content are present. Instructions to use npx wxt@latest init or npm install webext-bridge are standard development procedures and are intended to be executed by the user or agent in a controlled manner.
  • [DATA_EXFILTRATION]: No evidence of unauthorized data collection or exfiltration was found. The skill's operations are limited to the local filesystem for project analysis purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 09:12 AM
Security Audit — agent-trust-hub — wxt-extension-development