browser-debug-toolkit
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for obtaining the
chrome-devtools-mcppackage. This is an official utility from the Chrome DevTools project designed to connect AI agents to browser instances via the Model Context Protocol. - [REMOTE_CODE_EXECUTION]: Recommended installation procedures for the toolkit involve using
npxto download and execute thechrome-devtools-mcppackage, which is the official method for utilizing this utility. - [COMMAND_EXECUTION]: The skill utilizes shell heredocs to execute Node.js scripts through the
ego-browserutility. This allows the agent to perform multi-step browser interactions and complex state inspections in a single operation. - [DATA_EXFILTRATION]: Instructions are provided to read the
~/.config/opencode/opencode.jsonconfiguration file. This is intended for environment verification to ensure the browser debugging tools are correctly configured for the host platform. - [PROMPT_INJECTION]: The skill processes untrusted external data from web pages, which represents a surface for indirect prompt injection.
- Ingestion points: Browser accessibility trees (via
snapshotText()), results of runtime JavaScript execution (viajs()), and network/console event streams (viadrainEvents()). - Boundary markers: None observed in the provided interaction recipes; the skill does not explicitly define delimiters for untrusted web content.
- Capability inventory: The toolkit provides high-level control over the browser, including script evaluation, raw protocol access (
cdp()), and full interaction capabilities (click, type, navigate). - Sanitization: No specific content filtering or sanitization logic is described for the data retrieved from investigated web pages.
Audit Metadata