playwright-expert
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate guidance and code templates for Playwright. No obfuscation, persistence, or data exfiltration mechanisms were detected. Illustrative examples for authentication utilize generic test credentials that do not represent sensitive data leaks.
- [COMMAND_EXECUTION]: Documents standard automation commands such as
npx playwright test,npm run dev, andnpx playwright show-tracewithin configuration and workflow templates. - [EXTERNAL_DOWNLOADS]: The CI/CD configuration templates reference official GitHub Actions (
actions/checkout,actions/setup-node) and standard package management commands (npm ci,npx playwright install) to set up testing environments. - [PROMPT_INJECTION]: The skill documents capabilities for browser automation which interact with external web content, presenting a surface for indirect prompt injection.
- Ingestion points: Interactions with external web pages and API responses via locators and route interception (documented in
references/selectors-locators.mdandreferences/api-mocking.md). - Boundary markers: Not explicitly included in the provided code templates.
- Capability inventory: Generated code has extensive browser control, network interception, and local file system access for traces and reports (
references/configuration.md). - Sanitization: The skill follows standard automation patterns without additional sanitization layers for web content processed by the agent.
Audit Metadata