playwright-automation-fill-in-form
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to navigate to and interact with an external website (forms.microsoft.com), which allows data from that page to enter the agent's context and potentially influence its behavior.
- Ingestion points: Web content retrieved during Playwright browser automation.
- Boundary markers: Absent; there are no instructions to ignore or delimit content from the page.
- Capability inventory: Browser navigation, form field entry, and file upload capabilities provided by Playwright MCP.
- Sanitization: No sanitization or validation of the remote content is specified in the skill instructions.
Audit Metadata