content-script-developer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats detected. The skill consists of instructional text and boilerplate code for extension developers.
- [COMMAND_EXECUTION]: Code snippets demonstrate standard DOM operations (e.g.,
document.createElement,shadowRoot) within the restricted context of a browser content script and do not execute external or shell commands. - [DATA_EXFILTRATION]: Uses
chrome.runtime.sendMessage, which is the standard, secure way to communicate between a content script and a background script internal to an extension. No sensitive user data access or external network exfiltration patterns were observed.
Audit Metadata