htmx-devtools-extension
Warn
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone source code from an external, third-party GitHub repository at
https://github.com/atoolz/htmx-devtools.git. - [REMOTE_CODE_EXECUTION]: The installation instructions include running
npm installandnpm run buildon the cloned repository. This executes arbitrary build scripts and install hooks from an untrusted source. - [METADATA_POISONING]: The skill description and technical overview claim support for 'htmx 4.0 alpha'. As of current releases, HTMX is at version 2.x, and version 4.0 does not exist. This misleading information could be used to lure users into installing unverified software.
- [INDIRECT_PROMPT_INJECTION]: The extension's primary function is to capture and display external data which serves as an injection surface.
- Ingestion points: Captures HTMX requests, response bodies, and DOM snapshots from the active browser tab via a MAIN world page script.
- Boundary markers: No specific delimiters or warnings for the agent regarding embedded instructions in the captured traffic are mentioned.
- Capability inventory: The skill records network traffic, inspects DOM attributes, and generates diffs of page content.
- Sanitization: The instructions do not describe any sanitization or escaping of the captured HTML or JSON payloads before they are presented in the DevTools UI or to the agent.
Audit Metadata