vtable-browser-debugger-assistant

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill acts as a legitimate developer tool for troubleshooting VTable issues. The content focuses on scenegraph inspection and environment configuration.
  • [COMMAND_EXECUTION]: The snippets.md file provides shell commands for the user or agent to configure the Chrome browser environment, such as creating symbolic links and launching Chrome with the --remote-debugging-port flag. These are standard procedures for enabling remote debugging functionality.
  • [DYNAMIC_EXECUTION]: The skill utilizes browser-based script execution (via MCP) to inspect live objects like tableInstance and the VTable scenegraph. This is the primary intended function of the debugging assistant.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface for indirect prompt injection by reading data from external browser environments.
  • Ingestion points: Data returned from evaluate_script calls within the browser environment.
  • Boundary markers: None explicitly defined in the prompts to distinguish between browser data and system instructions.
  • Capability inventory: Ability to execute shell commands (rm, mkdir, ln) and browser scripts.
  • Sanitization: None observed in the provided instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 06:34 AM