browser-validator
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external web content through DOM snapshots (
mcp__chrome-devtools__take_snapshot). This establishes a potential surface for indirect prompt injection if a processed webpage contains malicious instructions. However, this is a necessary component of the skill's primary function (browser validation). - Ingestion points: DOM content captured via
take_snapshot(SKILL.md). - Boundary markers: None specified in the instructions.
- Capability inventory: Navigation, element interaction (click, hover, fill), and filesystem writes for screenshots.
- Sanitization: None described for the ingested DOM content.
- [EXTERNAL_DOWNLOADS]: The skill provides installation guidance pointing to an official repository for the Chrome MCP extension on GitHub.
Audit Metadata