testrail
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands such as
npx playwright testto run local tests and generate JSON reports for synchronization with TestRail. - [EXTERNAL_DOWNLOADS]: The use of
npxmay involve downloading the Playwright framework and its dependencies from the official npm registry during execution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from TestRail (titles, preconditions, and steps) and incorporates it into generated Playwright test files.
- Ingestion points: Data is retrieved from the TestRail API via the
testrail_get_casesMCP tool. - Boundary markers: The skill uses templates to map data to code, but no explicit markers are mentioned to ignore embedded instructions in the test case content.
- Capability inventory: The skill has the ability to write files to the local filesystem and execute shell commands via
npx. - Sanitization: No specific sanitization or validation steps are described for the external content before it is used to generate code.
Audit Metadata