playwright-cli
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill provides
run-codeandevalcommands which allow the agent to execute arbitrary JavaScript strings within the browser context. This capability is used for advanced automation and inspecting DOM attributes. - Evidence:
playwright-cli run-code "async page => { ... }"andplaywright-cli eval "document.title"inSKILL.mdandreferences/running-code.md. - [COMMAND_EXECUTION]: The instructions direct the agent to execute shell commands such as
npx playwright testto run local test suites andnpm installfor global tool installation. Executing local tests involves running code from the project directory. - Evidence:
PLAYWRIGHT_HTML_OPEN=never npx playwright testandnpm install -g @playwright/cli@latestinSKILL.mdandreferences/playwright-tests.md. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to navigate to, snapshot, and search content from arbitrary external websites. This exposes the agent to malicious instructions embedded in web pages (e.g., in HTML comments or hidden text) that could attempt to influence its behavior or exfiltrate data retrieved via the tool's storage access capabilities.
- Ingestion points:
playwright-cli snapshot,playwright-cli find, andplaywright-cli evalinSKILL.md. - Boundary markers: The skill instructs the agent to "redact sensitive values" and use "project-owned secure reference/path" for storage state in
SKILL.md. - Capability inventory:
run-code,eval,state-save, and shell command execution (npx playwright test) are available across all referenced scripts. - Sanitization: No automated sanitization of ingested web content is present; the skill relies on the agent's instructions to handle data safely.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of Playwright and its associated CLI tools from the official npm registry.
- Evidence:
npm install -g @playwright/cli@latestandnpm init playwright@latestinSKILL.mdandreferences/test-generation.md.
Audit Metadata