playwright-ci
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes templates in global-setup-teardown.md that utilize child_process.execSync to perform database migrations and seeding. These are standard operations for CI/CD environments and target project-local CLI tools.
- [EXTERNAL_DOWNLOADS]: The documentation provides examples for fetching official Docker images from Microsoft (mcr.microsoft.com) and utilizing trusted GitHub Actions from providers like GitHub and the Slack API.
- [DATA_EXFILTRATION]: A pattern in reporting-and-artifacts.md demonstrates a custom Slack reporter that transmits test result summaries to a user-defined webhook. This is a common and legitimate practice for pipeline status notifications.
- [CREDENTIALS_UNSAFE]: The skill promotes security best practices by instructing users to utilize platform-native secret management systems (e.g., GitHub Secrets) rather than hardcoding sensitive information in pipeline configurations.
Audit Metadata