vtable-browser-debugger-assistant
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a legitimate developer tool for troubleshooting VTable issues. The content focuses on scenegraph inspection and environment configuration.
- [COMMAND_EXECUTION]: The
snippets.mdfile provides shell commands for the user or agent to configure the Chrome browser environment, such as creating symbolic links and launching Chrome with the--remote-debugging-portflag. These are standard procedures for enabling remote debugging functionality. - [DYNAMIC_EXECUTION]: The skill utilizes browser-based script execution (via MCP) to inspect live objects like
tableInstanceand the VTable scenegraph. This is the primary intended function of the debugging assistant. - [INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface for indirect prompt injection by reading data from external browser environments.
- Ingestion points: Data returned from
evaluate_scriptcalls within the browser environment. - Boundary markers: None explicitly defined in the prompts to distinguish between browser data and system instructions.
- Capability inventory: Ability to execute shell commands (
rm,mkdir,ln) and browser scripts. - Sanitization: None observed in the provided instructions.
Audit Metadata