webperf-loading
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements performance diagnostic tools using established browser APIs such as
PerformanceObserver,Navigation Timing, andResource Timingto measure web performance metrics. - [EXTERNAL_DOWNLOADS]: Certain scripts, specifically
Cache-Strategy-Analysis.jsandCSS-Media-Queries-Analysis.js, performfetchrequests to page resources. These operations are strictly limited to auditing the headers and content of resources already referenced by the page and do not send data to external or untrusted domains. - [COMMAND_EXECUTION]: The skill utilizes the
mcp__chrome-devtools__evaluate_scripttool to execute JavaScript snippets within the browser context. All scripts are transparently documented and perform only their stated diagnostic functions. - [DATA_EXFILTRATION]: No evidence of data exfiltration or unauthorized data access was found. The
SSR-Hydration-Data-Analysis.jsscript includes a check for sensitive patterns (e.g., passwords, API keys) in hydration data to alert the user of potential security leaks on their own site, which is a defensive audit feature.
Audit Metadata