debug-mode
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute thechrome-devtools-mcppackage from the official NPM registry during the autopilot setup process. This is a well-known service from Google/Chrome DevTools.- [COMMAND_EXECUTION]: Thedebug_session.pyscript manages local sessions by executing theportlessCLI andnpx. It also modifies local configuration files for Cursor and Claude desktop (e.g.,~/.cursor/mcp.json) to enable browser debugging features.- [COMMAND_EXECUTION]: Theinstall-dm.shscript provides an idempotent way for users to add thedmhelper command to their shell profile (~/.zshrcor~/.bashrc) by appending a source command. This is an optional and documented installation step.- [SAFE]: Thecollector.pyscript implements a redaction filter that scans incoming logs for sensitive keys such asapi_key,authorization, andpassword, rejecting any payloads that contain potential credentials to ensure developer data privacy.- [SAFE]: The collector defaults to local-only execution (127.0.0.1) and the instructions include explicit guardrails against using remote tunnels or exposing debugging ports to the network.
Audit Metadata