skills/ingpoc/skills/webmcp/Gen Agent Trust Hub

webmcp

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Includes a utility script scripts/start_webmcp_chrome.sh that launches Google Chrome with specialized flags (--enable-features=WebMCPTesting) and enables remote debugging on a configurable local port.
  • [COMMAND_EXECUTION]: Performs a health check using curl against the local Chrome DevTools interface (http://127.0.0.1:9223/json/version) to ensure the session is ready for automation.
  • [DATA_EXPOSURE]: Manages isolated browser sessions and logs within a dedicated directory (~/.codex/webmcp-testing), which is a standard security practice for browser automation to ensure data isolation from the user's primary browser profile.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 09:45 AM
Security Audit — agent-trust-hub — webmcp