playwright-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code examples that strictly follow secure software engineering principles, such as utilizing environment variables for credentials and following the official Playwright documentation standards.
- [SAFE]: Command execution patterns provided (e.g., in global-setup.md) are intended for standard environment orchestration tasks such as database migrations and Docker Compose operations, using static commands without unsafe user-input interpolation.
- [SAFE]: All external dependencies and resources referenced, including Microsoft's official Playwright Docker images and well-known libraries like Axe-Core and Lighthouse, originate from trusted and well-known services.
- [SAFE]: The security testing patterns provided are educational in nature, illustrating how to test for common vulnerabilities (XSS, SQLi) in a controlled manner within an application's test suite.
Audit Metadata