webapp-testing

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation mentions the automatic installation of Playwright, which is a well-known browser automation library maintained by Microsoft.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes content from external web applications (such as console logs and page text) during testing. While this introduces an ingestion surface for untrusted data, it is a necessary part of the skill's primary function.
  • Ingestion points: The captureConsoleLogs function in test-helper.js and page interaction commands in SKILL.md ingest external content.
  • Boundary markers: No explicit delimiters are used to separate ingested content from internal instructions.
  • Capability inventory: The skill has the capability to navigate URLs, interact with web elements, and save screenshots to the local file system using Playwright.
  • Sanitization: Ingested content is logged or captured without additional sanitization filters.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 06:06 AM
Security Audit — agent-trust-hub — webapp-testing