skills/alvindean/soniq/playwright-pro/Gen Agent Trust Hub

playwright-pro

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute npx playwright and npm commands for initializing projects, running test suites locally and in the cloud, and performing test migrations. It also uses curl to send formatted test results to Slack webhooks as configured by the user.
  • [EXTERNAL_DOWNLOADS]: The toolkit automates the installation of the official playwright package and browserstack-local utility from the npm registry to support browser automation and cross-browser testing.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests user stories, component source code, and existing test files to generate or fix code. It lacks explicit boundary markers or sanitization for this ingested data, but the risk is low and inherent to the primary purpose of a code-generation and testing assistant.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 01:33 PM