webapp-testing

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The utility script scripts/with_server.py executes shell commands provided via CLI arguments. It uses subprocess.Popen with shell=True for server startup (e.g., npm run dev) and subprocess.run for the primary automation command.
  • [INDIRECT_PROMPT_INJECTION]: The skill interacts with and processes data from web applications, creating a potential injection surface.
  • Ingestion points: Data enters the agent's context through page.content(), page.locator().all(), and captured console logs as demonstrated in examples/console_logging.py.
  • Boundary markers: There are no explicit instructions or delimiters provided to the agent to distinguish between its instructions and the data retrieved from the web application.
  • Capability inventory: The skill provides the ability to execute shell commands and run local scripts via the scripts/with_server.py helper.
  • Sanitization: No sanitization or filtering is performed on the data ingested from the browser before the agent processes it.
  • [DYNAMIC_EXECUTION]: The skill's primary function is to guide the agent in writing and executing native Python Playwright scripts at runtime to perform UI automation and testing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 04:20 PM