report
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes test result files (JSON format) generated by the Playwright testing framework, creating a surface for indirect instructions to influence agent behavior.
- Ingestion points: Test result JSON output from
npx playwright testand historical data stored in thetest-reports/directory. - Boundary markers: Absent; test failure details and error messages are interpolated directly into markdown and curl payloads using template placeholders (e.g.,
{{error}}). - Capability inventory: The skill can execute shell commands (
curl,npx), perform filesystem operations (reading results, writing reports), and send data over the network. - Sanitization: No sanitization or validation of the test result content is performed before generating reports or triggering webhooks.
- [DATA_EXFILTRATION]: The skill checks for and utilizes sensitive environment variables (
TESTRAIL_URL,SLACK_WEBHOOK_URL) to send test metadata to external endpoints. - It uses
curlto POST test summary data to a dynamic domain provided in the Slack webhook variable. - It invokes an external tool integration (
/pw:testrail push) that utilizes theTESTRAIL_URLconfiguration. - [COMMAND_EXECUTION]: The skill relies on shell command execution for its core functionality.
- Executes
npx playwright testto run test suites and generate report data. - Uses
curlfor network-based reporting. - Employs common utilities like
tee,ls, andechofor logging and environment discovery.
Audit Metadata