init
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill initiates the installation of the Playwright testing framework using
npm init playwright@latestandnpm install -D @playwright/test. These are official packages from the well-known npm registry. - [COMMAND_EXECUTION]: The skill executes shell commands to install dependencies (
npm install), install browser binaries (npx playwright install), and verify the setup by running tests (npx playwright test). These commands are standard and necessary for the tool's stated purpose of initializing a testing environment. - [INDIRECT_PROMPT_INJECTION]: The skill reads project files such as
package.jsonandtsconfig.jsonto detect frameworks and existing configurations. - Ingestion points: Reads
package.jsonandtsconfig.json(SKILL.md). - Boundary markers: None present; the agent parses the files directly.
- Capability inventory: File system writes (creating
playwright.config.ts,e2e/directory, and CI YAML files) and shell command execution (npm,npx). - Sanitization: No explicit sanitization of the data read from project files is performed before it is used to determine configuration steps.
Audit Metadata