browser-extension-builder

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE] (SAFE): The skill provides standard architectural templates for Chrome and Firefox extensions. It does not contain any executable code that performs unauthorized actions.
  • [Indirect Prompt Injection] (LOW): The provided content script templates include patterns for reading DOM elements (e.g., document.querySelector('.data')). This is a standard extension feature but represents an ingestion point for untrusted data from web pages.
  • [Data Exposure & Exfiltration] (SAFE): Code examples use chrome.storage.local and chrome.storage.sync correctly for persisting user data. No hardcoded secrets or network exfiltration to external domains were identified.
  • [Command Execution] (SAFE): No use of eval(), exec(), or subprocess spawning was found in the provided code snippets.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:35 PM