playwright-regression-testing
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The file references/regression-strategy.md includes an example TypeScript script (scripts/select-tests.ts) that uses child_process.execSync to execute git commands for change-based test selection.
- [EXTERNAL_DOWNLOADS]: The GitHub Actions configuration in references/ci-cd-integration.md utilizes official actions from the GitHub actions organization for environment setup and artifact management.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use npx playwright install to download and install necessary browser binaries for the testing environment.
- [PROMPT_INJECTION]: The file references/regression-strategy.md contains an indirect prompt injection surface. The example script ingests output from git diff commands (untrusted data) without explicit sanitization or boundary markers, and the environment possesses command execution capabilities via execSync.
Audit Metadata