firefox-extension
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official development tools and libraries necessary for the browser extension lifecycle.
- Recommends the installation of the
web-extCLI andwebextension-polyfillfrom standard, well-known package registries. - Provides links to authoritative documentation from MDN (Mozilla Developer Network) and the Extension Workshop.
- [COMMAND_EXECUTION]: Includes CLI usage examples for typical development workflows.
- Provides commands for
web-ext run,web-ext lint,web-ext build, andweb-ext signto manage the extension development process. - These are standard commands for the intended development purpose of the skill.
- [SAFE]: The skill explicitly emphasizes security best practices and compliance with platform safety guidelines.
- It includes warnings against using
eval(), remote script execution, and code obfuscation, noting that these patterns are security risks and lead to rejection by the Add-ons Mozilla (AMO) review process. - Provides clear instructions on implementing a strict Content Security Policy (CSP) and adhering to the principle of least privilege regarding manifest permissions.
Audit Metadata