pw-init
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard package manager commands (
npm init playwright,npm install,npx playwright install) to set up the testing environment. These are necessary for the skill's primary purpose. - [EXTERNAL_DOWNLOADS]: Downloads the official Playwright framework and browser binaries from well-known repositories. It also generates GitHub Actions workflows that reference official, trusted actions from the
actionsorganization. - [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface as it scans project files like
package.jsonandtsconfig.jsonto detect the environment. - Ingestion points: Reads
package.json,tsconfig.json, and CI configuration files from the local project root. - Boundary markers: The global protocols section instructs the agent to treat external data as hostile and redact secrets, providing basic defensive context.
- Capability inventory: The skill has file-writing capabilities and command execution through
npmandnpx. - Sanitization: No explicit sanitization of the values read from
package.jsonis described, but the usage is limited to selecting configuration templates.
Audit Metadata