playwright-test
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
SKILL.mdfile includes a Playwright configuration snippet that uses thewebServer.commandproperty to runnpm run dev. This is a documented and standard method for starting a local development server for testing purposes. - [INDIRECT_PROMPT_INJECTION]: The skill documents browser automation tasks which represent an attack surface for indirect prompt injection should the agent navigate to malicious or untrusted websites.
- Ingestion points:
page.goto()methods described inSKILL.mdallow the agent to load external content into the browser context. - Boundary markers: None are present in the provided examples to delimit external content from agent instructions.
- Capability inventory: The skill utilizes subprocess execution (
webServer.command) and file system operations (saving screenshots and reports) as part of its core functionality inSKILL.md. - Sanitization: No specific sanitization or filtering of web content is described in the snippets.
Audit Metadata