Playwright Cross-Browser Test Runner
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install Playwright browser binaries (Chromium, Firefox, and WebKit) and their system dependencies from Microsoft's official repositories using the
npx playwright install --with-depscommand. - [COMMAND_EXECUTION]: It describes the execution of browser automation tests using the Playwright Test runner. This includes complex interactions like page navigation, element selection, and assertion execution which are standard for the described purpose.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it is designed to ingest and process untrusted data from external web pages via
page.goto(). - Ingestion points: External web content and API responses (via
page.route()) entering the agent's context through the browser automation tool inSKILL.md. - Boundary markers: None explicitly mentioned in the skill text to delimit external content from agent instructions.
- Capability inventory: Browser navigation, element manipulation, and file system writes for trace artifacts (
trace.zip). - Sanitization: No explicit sanitization or content validation mechanisms are described in the provided instructions.
Audit Metadata