playwright

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the @playwright/test package and official browser binaries (Chromium, Firefox, WebKit) from Microsoft's established repositories.
  • [COMMAND_EXECUTION]: The provided pwrun Python script executes Playwright CLI commands via npx to perform environment checks, suite inventory, and test report summarization as part of its primary functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection when scraping external websites; however, this is mitigated by explicit instructions to follow an 'extract -> validate -> save' loop and to avoid dumping raw HTML or session data directly into the agent context.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 03:33 PM