chrome-devtools
Fail
Audited by Snyk on Feb 15, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt includes examples that embed plaintext secrets directly into scripts/commands (e.g., page.type('#password', 'secret') and fill.js --value "secret"), which would require the agent to handle and output secret values verbatim.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill navigates to and ingests arbitrary public web pages and their runtime data (e.g., navigate.js, snapshot.js, aria-snapshot.js, screenshot.js, console.js, network.js) and even executes/evaluates page JS (evaluate.js), so the agent will read and interpret untrusted, user-generated third‑party content from arbitrary URLs, enabling indirect prompt injection.
Audit Metadata