playwright-cucumber-expert
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a local utility script
scripts/scaffold-bdd.mjsthat automates project setup by creating directory structures and writing configuration files (such ascucumber.jsandtsconfig.json) based on a selected complexity level. - [EXTERNAL_DOWNLOADS]: Documentation provides instructions for installing standard, well-known Node.js packages from the NPM registry and downloading browser binaries via the official Playwright installation command.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user requirements to generate Gherkin feature files and TypeScript step definitions. While this creates a processing surface for untrusted data, the behavior is consistent with the intended purpose of a code generation and testing tool.
- [DYNAMIC_EXECUTION]: Test configurations utilize
ts-node/registerto compile TypeScript files at runtime, which is standard practice for Cucumber BDD projects. Additionally, the scaffolding script generates new source files from internal templates.
Audit Metadata