playwright-debugger
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands including
npx playwright test,jq,unzip, andfindto run tests and extract report data. - [REMOTE_CODE_EXECUTION]: The skill uses
npx playwright testto run tests and suggests addingpage.screenshot()calls to code. Since Playwright is a well-known industry tool, this execution is expected for the skill's purpose. - [PROMPT_INJECTION]: The skill processes data from test reports and trace logs, which serves as a surface for indirect prompt injection.
- Ingestion points:
playwright-report/results.json,trace.trace, andtrace.network. - Boundary markers: None.
- Capability inventory: Shell execution (
npx,jq,unzip) and file system access. - Sanitization: None.
Audit Metadata