init
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the Playwright testing framework and browser binaries from official registries using
npm init playwright@latestandnpx playwright install --with-deps. These downloads are targeting official and well-known repositories. - [COMMAND_EXECUTION]: The skill performs shell commands to install development dependencies (
npm install -D @playwright/test), initialize the project structure, and run a verification test (npx playwright test). These are standard operations for a testing infrastructure setup skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local project files to determine configuration settings.
- Ingestion points:
package.json,tsconfig.json, and existing test directories are scanned in Step 1. - Boundary markers: None identified in the provided instructions.
- Capability inventory: The skill can perform file writes, package installations, and execute generated tests via
npx. - Sanitization: No specific sanitization or validation of the project file content is described before using it to select templates.
Audit Metadata