agency-test-automation-engineer

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions for setting up CI pipelines that download standard tools and dependencies.
  • Evidence: The GitHub Actions configuration executes npm ci and npx playwright install --with-deps chromium to prepare the test environment.
  • Context: These operations target the official NPM registry and well-known Playwright binaries, which are standard practices for this role.
  • [COMMAND_EXECUTION]: The skill provides commands for executing test suites in a CI environment.
  • Evidence: Uses npx playwright test to run automated browser tests.
  • Context: This is the primary function of the skill and uses standard, non-privileged execution patterns.
  • [PROMPT_INJECTION]: The skill includes surface area for indirect prompt injection as it is designed to interact with and manage developer-provided test scripts and CI configurations.
  • Ingestion points: Processes test files (.ts, .js) and CI workflow files (.yml) in SKILL.md.
  • Boundary markers: None explicitly defined to separate instructions from code content.
  • Capability inventory: Capable of shell command execution (npx) and network operations (E2E browser testing).
  • Sanitization: None specified; the skill assumes the provided codebase is trusted by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 07:55 AM
Security Audit — agent-trust-hub — agency-test-automation-engineer