webperf-core-web-vitals
Fail
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The SKILL.md file contains links to webperf-snippets.net/CLI. Automated security scans have identified this URL as associated with phishing activities.
- [REMOTE_CODE_EXECUTION]: The documentation encourages the use of npx webperf-snippets, which involves downloading and executing code from the npm registry at runtime. This poses a risk if the package or the registry is compromised.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from live websites (performance metrics, DOM elements, and image attributes).
- Ingestion points: The scripts scripts/CLS.js, scripts/INP.js, scripts/LCP.js, etc., use PerformanceObserver and document.querySelector to read content from the current page.
- Boundary markers (absent): The skill does not implement specific delimiters or warnings to treat metrics as untrusted when providing them to the agent.
- Capability inventory: The skill uses mcp__chrome-devtools__evaluate_script to execute logic within the browser.
- Sanitization (absent): No explicit sanitization or filtering is observed for the ingested metric data before it is returned to the agent.
Recommendations
- AI detected serious security threats
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata