browser-testing-with-devtools
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of the
@anthropic/chrome-devtools-mcppackage. This is an official package from a trusted organization and is standard for the skill's stated purpose of browser testing. - [PROMPT_INJECTION]: The static detection for instruction override is a false positive. The phrase "Ignore previous instructions" appears within a security warning advising the agent to disregard such commands if they are encountered in untrusted browser content (indirect prompt injection protection).
- [COMMAND_EXECUTION]: The skill utilizes JavaScript execution capabilities through the Chrome DevTools MCP. However, it explicitly includes robust security boundaries, instructing the agent to use these tools in a read-only manner, avoid accessing credentials, and refrain from making external network requests from within the browser context.
- [DATA_EXFILTRATION]: The instructions contain explicit prohibitions against exfiltrating page data or copying secrets found in the browser, mitigating risks associated with handling sensitive information during debugging.
Audit Metadata