wxt

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation repository for the WXT browser extension framework. It contains technical references, workflow guides, and security recommendations for developers.
  • [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The skill explicitly instructs users to avoid remote code techniques like eval or CDN scripts in accordance with modern browser security policies (Manifest V3).
  • [CREDENTIALS_UNSAFE]: No hardcoded credentials or secrets were found. The skill provides correct guidance on handling environment variables and secrets, warning that bundled env vars are public and should not contain sensitive keys.
  • [EXTERNAL_DOWNLOADS]: The skill references standard development dependencies (e.g., wxt, vite, typescript) and official documentation from trusted entities like Google, Mozilla, Microsoft, and Apple. All external references are appropriate for the skill's stated purpose.
  • [OBFUSCATION]: No evidence of code or URL obfuscation, homoglyph attacks, or hidden text patterns was identified.
  • [INDIRECT_PROMPT_INJECTION]: While the skill involves processing project files, it does not exhibit patterns that would allow for unauthorized instruction injection through external data. It provides guidance on safe data handling and sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 07:45 PM