chrome-devtools
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to fetch and run the official chrome-devtools-mcp package from the npm registry.
- [COMMAND_EXECUTION]: The skill uses browser automation capabilities to navigate pages and interact with DOM elements.
- [REMOTE_CODE_EXECUTION]: The evaluate_script tool enables JavaScript execution in the browser context, and the install_extension tool facilitates loading local browser extensions.
- [PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by processing content from external web pages. Ingestion points: Web content processed via take_snapshot and evaluate_script in SKILL.md. Boundary markers: Absent. Capability inventory: evaluate_script, click, fill, install_extension, and trigger_extension_action in SKILL.md. Sanitization: Absent.
Audit Metadata