Prompt-injection style instruction pattern detected.
Warn
- Code
- suspicious.prompt_injection_instructions
- Location
- SKILL.md:82
Security audit
Browser Testing With Devtools
Security checks across malware telemetry and agentic risk
Overview
This skill is a coherent browser-testing guide that discloses its DevTools access and gives clear safeguards for profiles, credentials, and untrusted page content.
Install only if you want an agent to use Chrome DevTools for browser testing. Keep the default isolated setup for ordinary localhost work, avoid connecting it to your daily logged-in Chrome profile, and do not allow browser page content or discovered tokens to become agent instructions or copied secrets.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.prompt_injection_instructions