pw-init
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to automate project setup, including directory creation (
mkdir), file deletion for cleanup (rm), and template extraction usingawk. - [EXTERNAL_DOWNLOADS]: The skill installs the Playwright framework and the
dotenvutility from the official NPM registry usingnpm initandnpm install. - [SAFE]: The skill explicitly instructs the agent to update the project's
.gitignorefile to include sensitive directories and files, such asplaywright-utils/.auth/(storing session states) and.env.test.*(storing environment credentials). - [SAFE]: The skill reads from specific paths in the user's home directory (
~/.claude/skills/) to copy project-specific architectural rules. This is a documented feature for propagating settings within the Claude Code environment and does not involve exfiltration of private user data. - [SAFE]: Requirement gathering utilizes the
AskUserQuestiontool to ensure human-in-the-loop confirmation for configuration choices, preventing autonomous misconfiguration.
Audit Metadata