chrome-devtools
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the 'chrome-devtools-mcp' server using npx. This is a legitimate resource provided by the Chrome DevTools team for debugging and automation workflows.
- [INDIRECT_PROMPT_INJECTION]: Processing external web content creates a vulnerability where the agent might follow instructions found on a page instead of the user's intent. 1. Ingestion points: The agent receives external data through tools like 'take_snapshot', 'list_pages' (page titles), and 'evaluate_script'. 2. Boundary markers: There are no specific instructions or delimiters used to separate untrusted page content from the agent's core instructions. 3. Capability inventory: The skill has the ability to interact with the browser ('click', 'fill'), execute arbitrary JavaScript ('evaluate_script'), and write screenshots/snapshots to the file system. 4. Sanitization: The skill does not implement validation or filtering of the content retrieved from pages.
- [DYNAMIC_EXECUTION]: The skill utilizes the 'evaluate_script' tool to run JavaScript within the browser context. While this is the intended purpose of the tool for debugging and runtime inspection, it represents a dynamic code execution capability that is common in browser automation skills.
Audit Metadata