go-playwright
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation describes the installation of Playwright drivers and browser binaries from the playwright-community GitHub repository using standard Go commands.
- [INDIRECT_PROMPT_INJECTION]: As a tool designed for web scraping and browser automation, it creates a potential surface for indirect prompt injection by ingesting data from external websites.
- Ingestion points: The skill instructions and implementation playbook describe methods for navigating to and retrieving content from arbitrary URLs.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the agent when interpreting content scraped from the web.
- Capability inventory: The skill enables shell command execution (via Go for driver installation) and file system writes (for session and cookie persistence).
- Sanitization: No explicit procedures for the sanitization or validation of external web data are included in the skill guidelines.
Audit Metadata