report
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads and parses test result data from
test-output.logand Playwright's JSON reporter. If a test case name or a captured error message contains malicious instructions, they could influence the agent's subsequent analysis or reporting steps. - Ingestion points: Reads output from
npx playwright testand files intest-results/andplaywright-report/. - Boundary markers: The skill does not implement specific delimiters or warnings to the agent to ignore potentially malicious content within test logs.
- Capability inventory: The skill can execute shell commands (
npx,curl), write to the file system, and perform network operations. - Sanitization: No sanitization or filtering is performed on the extracted test names or error messages before they are processed by the agent.
- [COMMAND_EXECUTION]: The skill executes several shell commands to manage the test lifecycle.
- Runs tests and generates reports using
npx playwright test. - Lists directory contents using
ls -lato verify result existence. - Uses
curlto send test summaries to a user-defined Slack webhook. - [EXTERNAL_DOWNLOADS]: The skill uses
npx playwright, which may fetch the Playwright framework and necessary browser binaries from Microsoft's official package registries. This is a standard and expected operation for this tool.
Audit Metadata