playwright-skill
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides the
scaffold-project.shscript andlambdatest-setup.tsfixture which execute standard environment setup and version detection commands such asnpm installandnpx playwright. These are benign operations intended for development workflow setup. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official, well-known automation packages including
@playwright/testandplaywright-node-sdkfrom the public NPM registry. These resources are from trusted or well-known sources and align with the skill's purpose. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it generates code based on application content or user requirements. Malicious instructions embedded in target websites or descriptions could attempt to influence the generated test code. This is an inherent risk of automated code generation.
Audit Metadata