chrome-validation
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the user to install the chrome-devtools-mcp package from the ChromeDevTools GitHub organization. This is a well-known service for browser automation integration.- [INDIRECT_PROMPT_INJECTION]: The agent is instructed to interact with external or local web URLs to perform validation. This creates an attack surface where a malicious website could attempt to influence the agent's behavior through page content or console output.\n
- Ingestion points: Page content, console logs, and network responses from target URLs (SKILL.md).\n
- Boundary markers: Not explicitly defined in the instructions to separate web content from instructions.\n
- Capability inventory: Uses Chrome DevTools MCP tools for browser manipulation and data collection (SKILL.md).\n
- Sanitization: No specific sanitization or filtering mentioned for data retrieved from the browser session.
Audit Metadata