firefox-extension

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references official development tools and libraries necessary for the browser extension lifecycle.
  • Recommends the installation of the web-ext CLI and webextension-polyfill from standard, well-known package registries.
  • Provides links to authoritative documentation from MDN (Mozilla Developer Network) and the Extension Workshop.
  • [COMMAND_EXECUTION]: Includes CLI usage examples for typical development workflows.
  • Provides commands for web-ext run, web-ext lint, web-ext build, and web-ext sign to manage the extension development process.
  • These are standard commands for the intended development purpose of the skill.
  • [SAFE]: The skill explicitly emphasizes security best practices and compliance with platform safety guidelines.
  • It includes warnings against using eval(), remote script execution, and code obfuscation, noting that these patterns are security risks and lead to rejection by the Add-ons Mozilla (AMO) review process.
  • Provides clear instructions on implementing a strict Content Security Policy (CSP) and adhering to the principle of least privilege regarding manifest permissions.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 04:22 AM