Playwright
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional content and code templates for Playwright. No malicious code, obfuscation, or unauthorized access patterns were detected.
- [EXTERNAL_DOWNLOADS]: The CI/CD and Docker configurations provided in
ci-cd.mdreference official and well-known resources, including Microsoft's container registry (mcr.microsoft.com) and official GitHub Actions from the GitHub organization. - [INDIRECT_PROMPT_INJECTION]: The skill documents web scraping patterns, which constitute an ingestion surface for untrusted data from external websites.
- Ingestion points: External web content is accessed via
page.gotoand extracted usingpage.$$evalorpage.evaluateinscraping.md. - Boundary markers: The provided code snippets do not implement specific boundary markers or instructions to ignore embedded commands in the scraped content, which is typical for boilerplate templates.
- Capability inventory: The skill includes patterns for file system writes, specifically for saving session states (
testing.md) and screenshots (debugging.md). - Sanitization: No specific sanitization or filtering of scraped text is demonstrated in the extraction logic.
Audit Metadata