playwright
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@playwright/testpackage from the official npm registry and downloads browser binaries vianpx playwright install. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to run Playwright commands for test execution and debugging. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes source files to generate test cases, creating a potential surface for indirect prompt injection if the source files contain malicious instructions.
- Ingestion points: Application source files read during the analysis phase.
- Boundary markers: None explicitly defined.
- Capability inventory: Includes file writing and bash command execution.
- Sanitization: No specific sanitization of source code content is described.
Audit Metadata