debug-mode

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and execute the chrome-devtools-mcp package from the official NPM registry during the autopilot setup process. This is a well-known service from Google/Chrome DevTools.- [COMMAND_EXECUTION]: The debug_session.py script manages local sessions by executing the portless CLI and npx. It also modifies local configuration files for Cursor and Claude desktop (e.g., ~/.cursor/mcp.json) to enable browser debugging features.- [COMMAND_EXECUTION]: The install-dm.sh script provides an idempotent way for users to add the dm helper command to their shell profile (~/.zshrc or ~/.bashrc) by appending a source command. This is an optional and documented installation step.- [SAFE]: The collector.py script implements a redaction filter that scans incoming logs for sensitive keys such as api_key, authorization, and password, rejecting any payloads that contain potential credentials to ensure developer data privacy.- [SAFE]: The collector defaults to local-only execution (127.0.0.1) and the instructions include explicit guardrails against using remote tunnels or exposing debugging ports to the network.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 02:41 PM