skills/cloudflare/com/web-perf/Gen Agent Trust Hub

web-perf

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION] (LOW): The skill is designed to navigate to and analyze arbitrary external websites, which serves as a surface for indirect prompt injection. * Ingestion points: The skill uses navigate_page and take_snapshot to ingest content from user-provided or discovered URLs. * Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the processed web data. * Capability inventory: The skill can navigate the browser, record performance traces, and take accessibility snapshots. * Sanitization: No sanitization of ingested content is performed before processing.
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill documentation references the chrome-devtools-mcp@latest package via npx. This is provided as a setup instruction for the user and is not executed automatically by the skill's code.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:14 PM
Security Audit — agent-trust-hub — web-perf