playwright-core
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides examples of
webServerandglobalSetupconfigurations to manage application lifecycle and database state (e.g.,npx prisma db seed). These are standard Playwright practices for setting up test environments. - [EXTERNAL_DOWNLOADS]: All referenced dependencies are well-known and reputable libraries from the automated testing ecosystem, including
@playwright/test,@axe-core/playwright,faker,dotenv, andotpauth. - [CREDENTIALS_UNSAFE]: The documentation consistently advocates for the use of environment variables and
.envfiles for secret management. No hardcoded sensitive credentials were detected in the examples. - [PROMPT_INJECTION]: The instructions focus entirely on technical implementation and do not contain any patterns intended to override agent behavior or bypass safety constraints.
- [DATA_EXFILTRATION]: Network operations described in the skill are restricted to standard testing activities, such as mocking third-party service responses (Stripe, OAuth) or making authenticated API calls using environment-provided tokens.
Audit Metadata