playwright-test
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of the Playwright testing framework and the Chromium browser binary from official registries (NPM) and well-known service providers (Microsoft).
- [COMMAND_EXECUTION]: Uses the
Bashtool to perform necessary project initialization and test execution tasks, such asnpm installandnpx playwright test. - [DYNAMIC_EXECUTION]: Generates JavaScript test files (
.spec.js) and configuration files at runtime by populating templates with data extracted from the project's design documents and form definitions. - [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface for indirect prompt injection as it reads and processes data from external files to generate code and formulate a final verdict.
- Ingestion points: Processes
design.md,Form.xml, and generated.log.jsonlfiles (identified inSKILL.md). - Boundary markers: Absent; no explicit delimiters are used when interpreting external file content.
- Capability inventory: Accesses
Read,Write,Edit,Glob,Grep, andBashtools (defined in frontmatter). - Sanitization: Absent; content from the ingestion points is interpolated into test scripts and status reports without visible validation or escaping.
Audit Metadata