devtools

Warn

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the 'chrome-devtools-mcp' package from the NPM registry at runtime using 'npx'.
  • [EXTERNAL_DOWNLOADS]: The documentation and scripts facilitate the download of the Google Chrome installer from Google's official distribution servers.
  • [PRIVILEGE_ESCALATION]: Instructions provided in 'references/chrome-installation.md' and 'scripts/check_chrome.sh' guide the user to execute commands with elevated privileges using 'sudo' (e.g., 'sudo apt install').
  • [PRIVILEGE_ESCALATION]: The troubleshooting guide suggests bypassing the Chrome sandbox by using the '--no-sandbox' flag to resolve launch failures, which significantly reduces the browser's security posture.
  • [COMMAND_EXECUTION]: The skill relies on several local bash scripts to detect the environment, check for dependencies, and manage browser processes, including the use of 'fuser' and 'pkill' to terminate existing sessions.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a bridge to external web content through browser automation, creating a surface for indirect prompt injection where data from visited websites could influence agent behavior.
  • Ingestion points: DOM snapshots, console logs, and page content read from the browser via the MCP server in 'SKILL.md'.
  • Boundary markers: Absent.
  • Capability inventory: Browser automation, JavaScript execution in the browser context, and local script execution.
  • Sanitization: Absent.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 24, 2026, 09:04 AM