automated-e2e-testing
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests manual test case definitions in markmap and YAML formats to generate automation logic. This presents a vulnerability surface where instructions hidden within test cases could influence agent behavior.
- Ingestion points: Manual test cases (markmap) and Schema files mentioned in Workflow One.
- Boundary markers: No explicit boundary markers or isolation protocols are defined for the ingested data.
- Capability inventory: The skill can write files (.spec.ts) and execute shell commands (npx playwright).
- Sanitization: No explicit content sanitization for ingested test cases is described.
- [DYNAMIC_EXECUTION]: The skill generates and executes automation scripts at runtime based on the provided inputs.
- Evidence: Workflow One describes converting manual cases into executable Playwright specs.
- [COMMAND_EXECUTION]: The skill frequently uses the shell to execute the Playwright test runner.
- Evidence: SKILL.md and references mention
npx playwright testfor running and verifying generated automation. - [EXTERNAL_DOWNLOADS]: The skill uses official package managers to fetch standard testing dependencies.
- Evidence: references/playwright-conventions.md includes instructions for installing
@axe-core/playwrightand official browser binaries.
Audit Metadata