chrome-devtools
Fail
Audited by Snyk on Feb 15, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill shows and encourages embedding secrets (e.g., passwords) directly into CLI arguments (e.g., --value "secret") and chain commands, which requires the LLM to include secret values verbatim and thus poses an exfiltration risk.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill explicitly navigates to arbitrary URLs supplied to scripts (e.g., navigate.js, screenshot.js, snapshot.js call page.goto(args.url) and snapshot.js extracts DOM/text, while screenshot.js captures page images), meaning it fetches and ingests untrusted public web content that the agent is expected to read and process.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs running an install-deps.sh that auto-installs system libraries and explicitly uses "sudo apt-get install imagemagick", which requires elevated privileges and modifies the machine's system state.
Audit Metadata