playwright-e2e
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to execute local shell commands for project setup and testing workflows, such as
npm install,npx playwright test, andgo run .. These commands are standard for initializing a Node.js project and running a backend server for integration testing.\n- [EXTERNAL_DOWNLOADS]: The skill referencesnpx playwright install chromium, which downloads browser binaries from Microsoft's official Playwright infrastructure. This is a well-known and expected operation for the Playwright framework.\n- [SAFE]: The documentation includes examples using hardcoded credentials likee2e-test-secret. These are clearly marked as placeholders for local test environments and do not involve the exposure of production secrets.\n- [SAFE]: The suggested 'Auth bypass' pattern is a legitimate testing architecture designed for non-production environments (when real email services are disabled). It allows automated tests to complete flows that would otherwise require manual intervention.
Audit Metadata