chrome-devtools-mcp
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute thechrome-devtools-mcppackage from the npm registry. This package is a vendor-attributed resource corresponding to the skill's author. - [COMMAND_EXECUTION]: The troubleshooting and setup instructions involve executing shell commands such as
pgrep,lsof,pkill -9,rm, andopen. These are used to manage the Chrome browser process and reset its configuration files (specificallyDevToolsActivePort) to ensure a successful connection. - [REMOTE_CODE_EXECUTION]: The skill provides an
evaluate_scripttool that allows the agent to execute arbitrary JavaScript code within the context of the controlled browser instance. - [PROMPT_INJECTION]: The skill interacts with untrusted external web content, creating an indirect prompt injection surface.
- Ingestion points: Data ingested from web pages via
take_snapshotand DOM evaluation. - Boundary markers: None identified; there are no instructions to the agent to treat page content as untrusted data.
- Capability inventory: The skill possesses capabilities for process management (shell commands), file system interaction (reading/deleting Chrome config files), and browser automation.
- Sanitization: There is no evidence of sanitization or filtering of the content retrieved from web pages before it is returned to the agent context.
Audit Metadata