playwright-skill

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides the scaffold-project.sh script and lambdatest-setup.ts fixture which execute standard environment setup and version detection commands such as npm install and npx playwright. These are benign operations intended for development workflow setup.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official, well-known automation packages including @playwright/test and playwright-node-sdk from the public NPM registry. These resources are from trusted or well-known sources and align with the skill's purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it generates code based on application content or user requirements. Malicious instructions embedded in target websites or descriptions could attempt to influence the generated test code. This is an inherent risk of automated code generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:12 PM