e2e-testing-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and patterns for end-to-end testing. It follows security best practices by recommending environment variables (
process.env.ADMIN_PASSWORD) for sensitive data instead of hardcoding production credentials.- [EXTERNAL_DOWNLOADS]: The skill references the use of the@axe-core/playwrightlibrary for accessibility testing, which is a well-known industry standard.- [INDIRECT_PROMPT_INJECTION]: The skill describes tools (Playwright and Cypress) that ingest and interact with external web applications, which are untrusted data sources. - Ingestion points: Data enters the context from external web pages via
page.goto()andcy.visit()commands described inSKILL.md. - Boundary markers: No specific delimiters or instructions are provided to the agent to ignore potentially malicious instructions embedded in the target web applications.
- Capability inventory: The described frameworks possess capabilities for full browser automation, network request interception/modification, and file system access (writing screenshots, videos, and trace files).
- Sanitization: There is no mention of sanitizing or validating the content retrieved from external web applications before processing.
Audit Metadata