go-playwright

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation describes the installation of Playwright drivers and browser binaries from the playwright-community GitHub repository using standard Go commands.
  • [INDIRECT_PROMPT_INJECTION]: As a tool designed for web scraping and browser automation, it creates a potential surface for indirect prompt injection by ingesting data from external websites.
  • Ingestion points: The skill instructions and implementation playbook describe methods for navigating to and retrieving content from arbitrary URLs.
  • Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the agent when interpreting content scraped from the web.
  • Capability inventory: The skill enables shell command execution (via Go for driver installation) and file system writes (for session and cookie persistence).
  • Sanitization: No explicit procedures for the sanitization or validation of external web data are included in the skill guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 03:04 PM
Security Audit — agent-trust-hub — go-playwright