playwright-test

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of the Playwright testing framework and the Chromium browser binary from official registries (NPM) and well-known service providers (Microsoft).
  • [COMMAND_EXECUTION]: Uses the Bash tool to perform necessary project initialization and test execution tasks, such as npm install and npx playwright test.
  • [DYNAMIC_EXECUTION]: Generates JavaScript test files (.spec.js) and configuration files at runtime by populating templates with data extracted from the project's design documents and form definitions.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface for indirect prompt injection as it reads and processes data from external files to generate code and formulate a final verdict.
  • Ingestion points: Processes design.md, Form.xml, and generated .log.jsonl files (identified in SKILL.md).
  • Boundary markers: Absent; no explicit delimiters are used when interpreting external file content.
  • Capability inventory: Accesses Read, Write, Edit, Glob, Grep, and Bash tools (defined in frontmatter).
  • Sanitization: Absent; content from the ingestion points is interpolated into test scripts and status reports without visible validation or escaping.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 04:41 PM