browser-extension-reverse

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The workflow involves using standard security analysis utilities like jq and Frida to inspect extension components and behavior. These actions are within the scope of the skill's stated purpose for authorized audits.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill methodology involves reading and analyzing external browser extension files, including manifest.json, content scripts, and background workers.
  • Boundary markers: The skill includes a mandatory confirmation gate that requires user verification of targets and authorization before any investigative actions are taken.
  • Capability inventory: The skill utilizes local analysis tools and browser debugging capabilities for inspection.
  • Sanitization: As a reverse engineering guide, the skill focuses on direct analysis of source material without automated sanitization, which is expected for this use case.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 11:59 AM