playwright-roll
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill executes local scripts and standard development tools such as Maven and Git. These are context-appropriate for library maintenance tasks.
- Dynamic Execution: The skill compiles and runs a project-specific Java class at runtime for automated code generation, which is a common practice for maintaining consistency between the protocol and the library's public API.
- External Downloads: The skill utilizes a maintenance script to fetch driver components from the vendor's infrastructure, which is an expected operation for updating the library.
- Indirect Prompt Injection Surface: The skill ingests untrusted data from an upstream repository via
git logandgit showin SKILL.md (ingestion points). No explicit boundary markers or sanitization steps are defined to delimit this external data. The agent possesses capabilities to execute shell commands, build tools, and runtime code generators (capability inventory), which represents a potential surface for indirect prompt injection if the ingested data contains embedded instructions.
Audit Metadata