chrome-devtools
Audited by Socket on Feb 26, 2026
1 alert found:
MalwareBENIGN: The skill's footprint is coherent with its stated purpose of Puppeteer-based browser automation with JSON outputs. Installation and execution flow rely on standard tooling (npm, Puppeteer) and common Linux/macOS/Windows patterns. Data flows (inputs to JSON outputs) are appropriate for an automation tool; no hardcoded secrets, no suspicious external data sinks, and no evident credential harvesting or autonomous real-world actions beyond automated browser interactions. Some risk remains around legitimate-use concerns (web scraping and automation can violate site terms or privacy expectations) and the dependency-download chain, but nothing in the fragment indicates malicious intent or supply-chain abuse.