chrome-cdp
Warn
Audited by Snyk on Aug 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The runtime path is the hub’s per-tab operations (
snap/eval/html/net), which can read free text from the user’s currently open/selected pages in Chrome via CDP/DOM (getPageslists existing page targets; subsequent commands attach and callAccessibility.getFullAXTreeorRuntime.evaluate), so an outsider who can cause the user to open/target attacker-controlled page content can get that text ingested without further selection beyond choosing a targetId prefix.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata