playwright-recording
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill documents browser automation which introduces a surface for indirect prompt injection. A malicious website could attempt to influence the agent's behavior through the content displayed in the browser during an automated session. \n
- Ingestion points:
page.goto(url)inSKILL.mdandreference.md. \n - Boundary markers: None present in the provided templates to isolate browser content from instructions. \n
- Capability inventory: Use of
page.evaluate(),fs.renameSync(), andexecSync()for video processing. \n - Sanitization: The templates do not show sanitization of external content before processing. \n- [COMMAND_EXECUTION]: The documentation suggests the use of shell commands for installing dependencies, running tests, and processing video files. \n
- Evidence:
execSyncused withffprobeinreference.md; suggestedffmpegandnpxcommands inSKILL.md. \n- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download and install external dependencies and browser binaries. \n - Evidence:
npm install -D playwright @playwright/testandnpx playwright install chromium.
Audit Metadata