playwright-dev
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Development Tool Execution: The skill contains numerous examples of command-line operations using standard development tools such as
npm,npx,git, and the GitHub CLI (gh). These commands are intended for environment setup, building the project, running tests, and managing issues within the Playwright development workflow. These represent standard practices for contributors to the project. - Trusted External Resource Access: The documentation includes instructions for installing dependencies from the official NPM registry and fetching browser binaries through Playwright's standard installation process. These operations target well-known, trusted infrastructure associated with Microsoft's Playwright project and are necessary for the development environment.
- Indirect Prompt Injection Surface: The guide explains how to define and implement Model Context Protocol (MCP) tools that accept input from an AI agent. While the instructions emphasize using Zod for input schema validation, these tools inherently process untrusted data to perform actions like browser navigation or interaction. This is a functional requirement of the software, and the guide provides patterns (like Zod validation) to help developers manage these security boundaries effectively.
Audit Metadata