skills/midudev/autoskills/web-perf/Gen Agent Trust Hub

web-perf

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external websites via navigation and performance trace analysis. Ingestion points: External target URLs (Phase 1). Boundary markers: Absent. Capability inventory: Page navigation, network request listing, trace analysis, and file system reading (Phase 5). Sanitization: Absent.\n- [EXTERNAL_DOWNLOADS]: The skill references and suggests installation of the chrome-devtools-mcp package from the official ChromeDevTools GitHub repository, which is an established and well-known source.\n- [COMMAND_EXECUTION]: The skill provides configuration examples for executing the Chrome DevTools MCP server using npx, including the -y flag to bypass interactive installation prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 05:14 PM