chrome-extension-development
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical documentation and boilerplate code for Chrome extension development. All code examples use standard, documented Chrome APIs such as
chrome.storage,chrome.runtime, andchrome.alarmsin accordance with Manifest V3 requirements. - [INDIRECT_PROMPT_INJECTION]: The skill describes building content scripts that interact with web page DOM elements. While this represents a potential surface for indirect prompt injection if the agent processes untrusted web content, the instructions include explicit security best practices to prevent XSS and injection attacks.
Audit Metadata