bx-playwright-setup
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill describes the
bxPlaywright installcommand, which downloads OS-specific browser drivers, Node.js, and browser binaries (Chromium, Firefox, WebKit) to the user's home directory (~/.boxlang/playwright). This is standard functionality for the Playwright framework to enable browser automation. - [COMMAND_EXECUTION]: The skill documentation includes various CLI commands for managing the automation environment, such as
bxPlaywright doctorfor system checks,bxPlaywright codegenfor recording browser actions, andbxPlaywright screenshotfor capturing web pages. These commands are typical for developer tooling. - [INDIRECT_PROMPT_INJECTION]: The skill provides capabilities to interact with external URLs through commands like
open,codegen, andscreenshot. This constitutes an ingestion surface for untrusted data from the web. - Ingestion points: URLs provided to CLI verbs like
open,codegen,screenshot, andpdfinSKILL.md. - Boundary markers: None explicitly defined in the setup documentation; the agent should apply its own safety boundaries when navigating to untrusted sites.
- Capability inventory: The skill allows the agent to browse the web, generate code based on site interactions, and write files (screenshots, PDFs, and trace logs) to the local filesystem.
- Sanitization: Not explicitly mentioned in this configuration skill.
Audit Metadata