chrome-devtools-windows
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill contains PowerShell scripts to launch the Google Chrome executable with specific flags (
--remote-debugging-port,--user-data-dir) and to force-stop running Chrome processes. These operations are transparently documented and required for the skill's primary function of enabling Chrome DevTools Protocol (CDP) access. - [EXTERNAL_DOWNLOADS]: The documentation includes links to the official Microsoft GitHub repository for the
chrome-devtools-mcppackage and the Chrome DevTools Protocol documentation. These are well-known, trusted sources. - [DATA_EXPOSURE]: The skill references a specific hardcoded Windows user path (
C:\Users\steph\AppData\Local\ChromeCDPProfile). While this reveals a username, it is not a credential or sensitive system file access, but rather a configuration detail for the browser profile. - [DATA_EXFILTRATION]: Uses
Invoke-WebRequestto query the local loopback address (127.0.0.1:9333) to verify that the debugger is listening. No data is sent to external or untrusted domains.
Audit Metadata