webperf-loading

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements performance diagnostic tools using established browser APIs such as PerformanceObserver, Navigation Timing, and Resource Timing to measure web performance metrics.
  • [EXTERNAL_DOWNLOADS]: Certain scripts, specifically Cache-Strategy-Analysis.js and CSS-Media-Queries-Analysis.js, perform fetch requests to page resources. These operations are strictly limited to auditing the headers and content of resources already referenced by the page and do not send data to external or untrusted domains.
  • [COMMAND_EXECUTION]: The skill utilizes the mcp__chrome-devtools__evaluate_script tool to execute JavaScript snippets within the browser context. All scripts are transparently documented and perform only their stated diagnostic functions.
  • [DATA_EXFILTRATION]: No evidence of data exfiltration or unauthorized data access was found. The SSR-Hydration-Data-Analysis.js script includes a check for sensitive patterns (e.g., passwords, API keys) in hydration data to alert the user of potential security leaks on their own site, which is a defensive audit feature.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 02:25 PM