playwright
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
@playwright/testpackage and official browser binaries (Chromium, Firefox, WebKit) from Microsoft's established repositories. - [COMMAND_EXECUTION]: The provided
pwrunPython script executes Playwright CLI commands vianpxto perform environment checks, suite inventory, and test report summarization as part of its primary functionality. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection when scraping external websites; however, this is mitigated by explicit instructions to follow an 'extract -> validate -> save' loop and to avoid dumping raw HTML or session data directly into the agent context.
Audit Metadata