devtools
Warn
Audited by Snyk on Mar 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly launches Chrome to a user-specified URL (SKILL.md Step 5 and scripts/launch_chrome.sh) and uses chrome-devtools-mcp to read DOM, console messages, network responses and execute JavaScript (see Visual Inspection / Network Analysis in SKILL.md and the use of the DevTools /json endpoints), so it ingests and acts on arbitrary public web content that could contain untrusted instructions.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill invokes "npx chrome-devtools-mcp@latest" at runtime (and references the repository https://github.com/ChromeDevTools/chrome-devtools-mcp), which will fetch and execute remote npm package code as a required dependency for the MCP server.
Audit Metadata