playwright-testing
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for environment setup and test execution, such as
npx playwright install --with-depsandnpx playwright test. These are standard operations for the Playwright framework. - [EXTERNAL_DOWNLOADS]: Fetches Playwright browser binaries and system dependencies from official sources during the installation process.
- [DYNAMIC_EXECUTION]: Uses
page.evaluate()andaxe.analyze()to execute JavaScript within the browser context for page inspection and accessibility auditing, which is the core functionality of the tool. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data by navigating to web pages (defaulting to
localhost:8080) and extracting content for testing purposes. It follows secure patterns by using standard selectors and providing explicit examples for link integrity and accessibility audits. - [SAFE]: References to external repositories and documentation (Microsoft's Playwright, Axe-core, and the vendor's own ISMS policy) target trusted or well-known sources.
Audit Metadata