browser-viz-verify
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and run thechrome-devtools-mcppackage from the npm registry. This is a standard dependency for its browser automation functionality.\n- [DATA_EXFILTRATION]: The skill opens local files via thefile://protocol. This provides a capability to read and capture screenshots of local files based on user-provided paths. This is a standard function for a verification utility.\n- [PROMPT_INJECTION]: The skill renders and executes JavaScript from HTML files, which represents an indirect injection surface if the files contain data from untrusted sources. Risk is mitigated by the design, which uses isolated headless sessions that do not touch authenticated browser profiles.
Audit Metadata