webapp-testing
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation mentions the automatic installation of Playwright, which is a well-known browser automation library maintained by Microsoft.
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from external web applications (such as console logs and page text) during testing. While this introduces an ingestion surface for untrusted data, it is a necessary part of the skill's primary function.
- Ingestion points: The
captureConsoleLogsfunction intest-helper.jsand page interaction commands inSKILL.mdingest external content. - Boundary markers: No explicit delimiters are used to separate ingested content from internal instructions.
- Capability inventory: The skill has the capability to navigate URLs, interact with web elements, and save screenshots to the local file system using Playwright.
- Sanitization: Ingested content is logged or captured without additional sanitization filters.
Audit Metadata