verify-frontend
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a structured workflow for UI quality assurance using standard browser-based diagnostic tools such as the
chrome-devtoolsMCP. Behavior is limited to local dev server interaction and reporting findings back to the user. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it instructs the agent to navigate to and process the content of arbitrary web pages. An attacker-controlled page could contain instructions designed to influence the agent's behavior.
- Ingestion points: The
new_pageandnavigate_pagetools load external/local web content into the agent's context. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are used when reading page content or console logs.
- Capability inventory: Browser navigation, screenshot capture, log reading, performance auditing, and basic Git operations (
git stash). These tools are used for observation rather than modification or exfiltration. - Sanitization: The skill does not describe any specific sanitization or filtering of the content retrieved from the browser.
Audit Metadata