agent-react-devtools
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
agent-react-devtoolspackage from the npm registry. This is a vendor-provided resource used for the core functionality of the skill.\n- [COMMAND_EXECUTION]: The skill utilizes theagent-react-devtoolsCLI tool to manage a background process and perform inspections. It includes functionality to modify project configuration files (npx agent-react-devtools init) to integrate the tool into the development environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection by reading and displaying data from a running React application (props, state, and hooks).\n - Ingestion points: Component data extracted from the React application via the
get componentcommand as described inSKILL.md.\n - Boundary markers: The skill uses structured output with identifiers like
@c1, but lacks specific instructions for the agent to ignore potentially malicious strings found within application data.\n - Capability inventory: The agent can execute CLI commands that modify project files, manage background processes, and profile application performance.\n
- Sanitization: The skill does not appear to sanitize or filter values retrieved from the React application's state or props before displaying them to the agent.
Audit Metadata