qa-engineer
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the well-known Playwright library and its corresponding browser binaries from official package registries to facilitate end-to-end testing.
- [COMMAND_EXECUTION]: Utilizes command-line tools such as pip and curl to prepare the environment and verify the status of local services.
- [COMMAND_EXECUTION]: Executes Python scripts that use Playwright to navigate to web pages and capture screenshots for functional verification.
- [DATA_EXFILTRATION]: Network activities are focused on the local testing environment (localhost) and do not demonstrate patterns of unauthorized data transfer to external domains.
- [PROMPT_INJECTION]: The skill processes untrusted web content via Playwright's page scraping capabilities, which introduces a surface for indirect prompt injection; however, this is inherent to the tool's intended use for testing external applications.
Audit Metadata