testrail
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
npx playwright testto run local test suites and capture results in JSON format for synchronization. This is a standard operation for testing integrations. - [DATA_EXFILTRATION]: Synchronizes test results, metadata, and case IDs with an external TestRail instance. This behavior is the primary intended purpose of the skill and uses authorized MCP tools.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests test case data (titles, preconditions, and steps) from TestRail via the
testrail_get_casestool to generate local Playwright test files. While this creates an ingestion surface for untrusted external data, the generation process follows a structured template and is core to the skill's functionality.
Audit Metadata