devtools
Warn
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the 'chrome-devtools-mcp' package from the NPM registry at runtime using 'npx'.
- [EXTERNAL_DOWNLOADS]: The documentation and scripts facilitate the download of the Google Chrome installer from Google's official distribution servers.
- [PRIVILEGE_ESCALATION]: Instructions provided in 'references/chrome-installation.md' and 'scripts/check_chrome.sh' guide the user to execute commands with elevated privileges using 'sudo' (e.g., 'sudo apt install').
- [PRIVILEGE_ESCALATION]: The troubleshooting guide suggests bypassing the Chrome sandbox by using the '--no-sandbox' flag to resolve launch failures, which significantly reduces the browser's security posture.
- [COMMAND_EXECUTION]: The skill relies on several local bash scripts to detect the environment, check for dependencies, and manage browser processes, including the use of 'fuser' and 'pkill' to terminate existing sessions.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a bridge to external web content through browser automation, creating a surface for indirect prompt injection where data from visited websites could influence agent behavior.
- Ingestion points: DOM snapshots, console logs, and page content read from the browser via the MCP server in 'SKILL.md'.
- Boundary markers: Absent.
- Capability inventory: Browser automation, JavaScript execution in the browser context, and local script execution.
- Sanitization: Absent.
Audit Metadata