report

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard shell commands (ls, tee, curl) and the Playwright CLI (npx playwright test) to execute test suites and manage output files. These operations are restricted to the local environment and are essential for the skill's primary function of test reporting.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from test logs and JSON reports (test-output.log, playwright-report/). While this represents a potential surface for instructions embedded in test names or errors, the skill employs fixed templates for markdown and JSON reporting, which effectively delimits the data and minimizes the risk of the agent misinterpreting the content as commands.
  • [EXTERNAL_DOWNLOADS]: The skill invokes npx, which may fetch the Playwright library from the official NPM registry. As Playwright is a well-known service provided by a trusted vendor, this behavior is considered standard and safe for a development-oriented skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 10:02 AM