report
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to run tests (
npx playwright test), check directory contents (ls), and send reports viacurl. - [INDIRECT_PROMPT_INJECTION]: The skill processes test results which are external and potentially untrusted data sources.
- Ingestion points: Test results and JSON reports located in
test-results/orplaywright-report/. - Boundary markers: The skill does not define specific delimiters for the parsed test data when generating summaries.
- Capability inventory: The agent has access to shell execution via
npxand network operations viacurl. - Sanitization: No explicit sanitization of test names or error messages is specified before they are interpolated into the reporting templates.
- [EXTERNAL_DOWNLOADS]: Uses
npxto execute Playwright, which may fetch the tool from the official npm registry if not already present.
Audit Metadata