browser-viz-verify

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and run the chrome-devtools-mcp package from the npm registry. This is a standard dependency for its browser automation functionality.\n- [DATA_EXFILTRATION]: The skill opens local files via the file:// protocol. This provides a capability to read and capture screenshots of local files based on user-provided paths. This is a standard function for a verification utility.\n- [PROMPT_INJECTION]: The skill renders and executes JavaScript from HTML files, which represents an indirect injection surface if the files contain data from untrusted sources. Risk is mitigated by the design, which uses isolated headless sessions that do not touch authenticated browser profiles.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 04:29 PM
Security Audit — agent-trust-hub — browser-viz-verify