e2e-validate
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local project commands (
npm,go build,cargo build) to prepare and run the software under test. These are standard operations for functional validation of codebases. - [EXTERNAL_DOWNLOADS]: Leverages
npx playwright, which is a well-known and trusted tool for browser automation. - [DATA_EXFILTRATION]: All network operations are directed at
localhostfor testing purposes. Validation evidence such as screenshots and logs are saved to a locale2e-evidence/folder. - [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it reads data from API responses and command outputs into the agent's context.
- Ingestion points:
e2e-evidence/*.json,e2e-evidence/*.txt,e2e-evidence/console.log(from SKILL.md). - Boundary markers: Absent.
- Capability inventory:
npm run dev,go build,cargo build,curl, and Playwright automation. - Sanitization: Absent. The skill instructions focus on functional validation and quoting evidence rather than following instructions within the data.
Audit Metadata