playwright-analysis-requirements
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data sources including user tickets, specifications, and repository-local documentation. This creates a surface for indirect prompt injection attacks where an attacker could embed instructions in the source text.\n
- Ingestion points: Identified in SKILL.md as tickets, specs, links, and repository docs.\n
- Boundary markers: The skill instructions lack explicit delimiters or instructions for the agent to ignore potentially malicious embedded content.\n
- Capability inventory: The skill is limited to text analysis and summary generation. The metadata explicitly states it does not write files, and no network or command execution capabilities are provided.\n
- Sanitization: There is no evidence of input validation or content filtering for the requirement sources.
Audit Metadata