react-devtools-plus
Warn
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
react-devtools-pluspackage vianpmorpnpm. The package and its source code are hosted in a personal GitHub repository (wzc520pyfm/react-devtools-plus), which does not belong to a recognized trusted organization. - [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface for indirect prompt injection by ingesting and rendering component data from the host application.
- Ingestion points: Component hierarchy, props, state, hooks, and asset metadata accessed during debugging sessions (SKILL.md).
- Boundary markers: The skill documentation does not mention delimiters or instructions to ignore embedded content within the ingested props or state.
- Capability inventory: No direct shell execution or file-write capabilities are explicitly defined within the skill's instructions for the agent, though the plugin itself operates within the build environment.
- Sanitization: There is no evidence of sanitization or filtering for the data processed and displayed by the DevTools UI.
Audit Metadata