report

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands to run tests (npx playwright test), check directory contents (ls), and send reports via curl.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes test results which are external and potentially untrusted data sources.
  • Ingestion points: Test results and JSON reports located in test-results/ or playwright-report/.
  • Boundary markers: The skill does not define specific delimiters for the parsed test data when generating summaries.
  • Capability inventory: The agent has access to shell execution via npx and network operations via curl.
  • Sanitization: No explicit sanitization of test names or error messages is specified before they are interpolated into the reporting templates.
  • [EXTERNAL_DOWNLOADS]: Uses npx to execute Playwright, which may fetch the tool from the official npm registry if not already present.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 02:33 PM
Security Audit — agent-trust-hub — report