chrome-devtools

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill's examples and workflows explicitly pass sensitive values (e.g., passwords) as literal CLI arguments like --value "secret", which instructs the agent to generate commands containing secrets verbatim, creating an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's README and workflow (SKILL.md) plus multiple scripts (e.g., navigate.js, snapshot.js, network.js, console.js, evaluate.js and kling-explore.js) explicitly navigate to and scrape/arbitrate arbitrary public URLs (--url), extract DOM/console/network data and even eval page scripts, and then use those results to drive clicks/fills/next actions—so untrusted third‑party web content can directly influence tool behavior.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs running installation scripts and explicit sudo apt-get commands (e.g., ImageMagick and system libraries via install-deps.sh), which modify system state and require elevated privileges, so it risks compromising the host.