playwright-generate-test
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to save generated TypeScript code to the local file system and execute it. This process involves running code that is dynamically generated based on external user input, which can be risky if the generation process is compromised.
- [PROMPT_INJECTION]: This skill is vulnerable to indirect prompt injection because it ingests untrusted 'scenarios' to drive code generation and execution.
- Ingestion points: User-provided scenarios in the prompt.
- Boundary markers: None identified in the instructions to separate user data from system instructions.
- Capability inventory: File writing to the 'tests' directory and execution of the resulting test files.
- Sanitization: There are no instructions for validating, escaping, or sanitizing the input scenario before it is used to generate executable code.
Audit Metadata