browser-debugging

Warn

Audited by Socket on Apr 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose and capabilities are broadly coherent for browser debugging, but the install instructions point to a package name that conflicts with the official Chrome DevTools MCP distribution. That mismatch creates a meaningful supply-chain risk even though the rest of the skill looks like a normal documentation-style debugging guide with no clear exfiltration flow.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Apr 24, 2026, 05:45 PM
Package URL
pkg:socket/skills-sh/vibeeval%2Fvibecosystem%2Fbrowser-debugging%2F@6af613f13e0e69d10fc97ba4c044a05ab8f51c83
Security Audit — socket — browser-debugging