playwright-testing

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for environment setup and test execution, such as npx playwright install --with-deps and npx playwright test. These are standard operations for the Playwright framework.
  • [EXTERNAL_DOWNLOADS]: Fetches Playwright browser binaries and system dependencies from official sources during the installation process.
  • [DYNAMIC_EXECUTION]: Uses page.evaluate() and axe.analyze() to execute JavaScript within the browser context for page inspection and accessibility auditing, which is the core functionality of the tool.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data by navigating to web pages (defaulting to localhost:8080) and extracting content for testing purposes. It follows secure patterns by using standard selectors and providing explicit examples for link integrity and accessibility audits.
  • [SAFE]: References to external repositories and documentation (Microsoft's Playwright, Axe-core, and the vendor's own ISMS policy) target trusted or well-known sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 11:41 PM