browser-extension-reverse
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The workflow involves using standard security analysis utilities like
jqandFridato inspect extension components and behavior. These actions are within the scope of the skill's stated purpose for authorized audits. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill methodology involves reading and analyzing external browser extension files, including
manifest.json, content scripts, and background workers. - Boundary markers: The skill includes a mandatory confirmation gate that requires user verification of targets and authorization before any investigative actions are taken.
- Capability inventory: The skill utilizes local analysis tools and browser debugging capabilities for inspection.
- Sanitization: As a reverse engineering guide, the skill focuses on direct analysis of source material without automated sanitization, which is expected for this use case.
Audit Metadata