browser-devtools

Pass

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the use of the Lighthouse performance auditing tool via npx for automated performance measurements.
  • [PROMPT_INJECTION]: The skill defines workflows where an agent interacts with live browser runtime data, creating a surface for indirect prompt injection attacks.
  • Ingestion points: The skill utilizes Chrome DevTools MCP to inspect external web pages, including DOM state and network requests (SKILL.md).
  • Boundary markers: No delimiters or safety instructions are provided to help the agent distinguish between legitimate tool output and malicious instructions potentially embedded in web content.
  • Capability inventory: The skill provides access to browser inspection, performance measurement, and network log data (SKILL.md).
  • Sanitization: There are no mechanisms described for sanitizing data ingested from the browser environment before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 20, 2026, 05:26 AM