extension-functions-best-practices
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is an educational resource providing implementation guidance for browser extensions across 13 categories, including AI, Web3, and security-sensitive features like password management.
- [EXTERNAL_DOWNLOADS]: The documentation references numerous well-known open-source projects (e.g., uBlock Origin, MetaMask, Bitwarden, Screenity) and established libraries (e.g., Vercel AI SDK, LangChain, ethers.js). All external links target trusted GitHub organizations or well-known technology services, which are handled as safe references for developer education.
- [CREDENTIALS_UNSAFE]: Code samples for password managers and Web3 wallets correctly demonstrate secure practices, such as client-side encryption using the Web Crypto API (AES-256-GCM, PBKDF2) and secure storage using extension APIs. It explicitly warns against insecure practices like storing API keys in content scripts or buffering large files in memory.
- [COMMAND_EXECUTION]: The skill contains JavaScript snippets intended for execution within the browser extension environment. There are no instructions or code patterns that attempt to execute unauthorized commands on the host operating system or bypass platform security boundaries.
Audit Metadata