browser-testing-with-devtools
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to configure and download the
chrome-devtools-mcppackage from the NPM registry usingnpx. This is a standard method for installing MCP servers and involves a well-known public package registry. - [PROMPT_INJECTION]: Static analysis flagged defensive instructions as potential prompt injection. Upon review, the skill contains explicit security guidelines instructing the agent to ignore any command-like text found in untrusted browser data (e.g., 'Ignore previous instructions' appearing in a webpage's DOM). This is a robust security measure against indirect prompt injection.
- [DATA_EXFILTRATION]: While the skill interacts with browser data, it establishes clear 'Security Boundaries'. It explicitly forbids the agent from accessing cookies, storage tokens, or authentication material, and restricts JavaScript execution to read-only state inspection, preventing unauthorized data access or exfiltration.
- [COMMAND_EXECUTION]: The skill documents the use of a tool for JavaScript execution within the browser context. This capability is strictly constrained by the provided instructions to be read-only and restricted from making external network requests.
Audit Metadata