chrome-devtools-cli
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
chrome-devtoolsCLI to automate browser interactions and manage system tasks.- [EXTERNAL_DOWNLOADS]: The installation guide instructs users to install thechrome-devtools-mcppackage globally from the NPM registry.- [DYNAMIC_EXECUTION]: The skill enables the execution of arbitrary JavaScript within the browser context through commands likeevaluate_scriptand initialization scripts during navigation.- [INDIRECT_PROMPT_INJECTION]: Interaction with external web pages creates a surface for indirect prompt injection, as the agent processes untrusted content. - Ingestion points: The agent ingests external data through
take_snapshot,list_pages,list_network_requests, andlist_console_messagesas described inSKILL.md. - Boundary markers: There are no markers or specific instructions provided to separate untrusted data from instructions for the agent.
- Capability inventory: The tool possesses high-privilege capabilities including full filesystem access by default, network navigation, and browser script execution.
- Sanitization: The skill documentation does not describe any methods for validating or sanitizing retrieved web content before processing.
Audit Metadata