chrome-devrel
Fail
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: CRITICAL
Full Analysis
- [PROMPT_INJECTION]: No behavior override attempts or bypass markers were detected. The skill instructions provide strict operational guidelines that prioritize evidence and accuracy.
- [DATA_EXFILTRATION]: No sensitive file paths or credential harvesting patterns were found. The skill includes explicit instructions to preserve the public/private data boundary.
- [COMMAND_EXECUTION]: No dangerous or autonomous command execution patterns. Documentation examples of shell commands are benign and intended for manual execution by developers.
- [EXTERNAL_DOWNLOADS]: The skill references numerous external resources, all of which originate from trusted technical domains (e.g., GitHub, W3C, WHATWG, Chrome Status). The phishing alert for the
immersive-web.github.iodomain is a false positive, as it is the official site for the WebXR specification community group.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata