webapp-testing
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The utility script
scripts/with_server.pyexecutes shell commands provided via CLI arguments. It usessubprocess.Popenwithshell=Truefor server startup (e.g.,npm run dev) andsubprocess.runfor the primary automation command. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with and processes data from web applications, creating a potential injection surface.
- Ingestion points: Data enters the agent's context through
page.content(),page.locator().all(), and captured console logs as demonstrated inexamples/console_logging.py. - Boundary markers: There are no explicit instructions or delimiters provided to the agent to distinguish between its instructions and the data retrieved from the web application.
- Capability inventory: The skill provides the ability to execute shell commands and run local scripts via the
scripts/with_server.pyhelper. - Sanitization: No sanitization or filtering is performed on the data ingested from the browser before the agent processes it.
- [DYNAMIC_EXECUTION]: The skill's primary function is to guide the agent in writing and executing native Python Playwright scripts at runtime to perform UI automation and testing.
Audit Metadata