chrome-extension-wxt
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate development resource. It provides instructions for initializing projects using
npm create wxt@latest, which is the official initialization command for the well-known WXT framework. - [SAFE]: The skill includes a dedicated security reference (
references/best-practices.md) that explicitly recommends high-security standards such as implementing a strict Content Security Policy (CSP), using minimal permissions, and sanitizing user inputs using libraries like DOMPurify. - [SAFE]: No obfuscation, data exfiltration, or malicious prompt injection patterns were detected. The command execution patterns (npm/npx) are standard for the intended primary purpose of extension development.
- [SAFE]: Remote resources referenced in the skill (documentation links to wxt.dev, developer.chrome.com, and popular open-source templates on GitHub) are all well-known and reputable developer resources.
Audit Metadata