chrome-devtools-troubleshooting
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the
chrome-devtools-mcppackage from the npm registry usingnpxto perform help-text diagnostics. This utilizes a well-known package from a reputable service.\n- [COMMAND_EXECUTION]: Instructs the agent to runnpxfor diagnostics anduv runfor internal skill validation and auditing. These commands are bounded and aligned with the skill's purpose.\n- [PROMPT_INJECTION]: The skill reads local configuration files such as.mcp.jsonand.claude/settings.jsonto triage connection issues, which introduces an indirect prompt injection surface.\n - Ingestion points: Reads local configuration files (SKILL.md).\n
- Boundary markers: Absent; there are no instructions to ignore embedded commands in these files.\n
- Capability inventory: Executes shell commands via
npxanduv run(SKILL.md).\n - Sanitization: Absent; configuration content is evaluated directly without sanitization.
Audit Metadata