web-perf
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION] (LOW): The skill is designed to navigate to and analyze arbitrary external websites, which serves as a surface for indirect prompt injection. * Ingestion points: The skill uses
navigate_pageandtake_snapshotto ingest content from user-provided or discovered URLs. * Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the processed web data. * Capability inventory: The skill can navigate the browser, record performance traces, and take accessibility snapshots. * Sanitization: No sanitization of ingested content is performed before processing. - [EXTERNAL_DOWNLOADS] (SAFE): The skill documentation references the
chrome-devtools-mcp@latestpackage via npx. This is provided as a setup instruction for the user and is not executed automatically by the skill's code.
Audit Metadata