bx-playwright-setup

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill describes the bxPlaywright install command, which downloads OS-specific browser drivers, Node.js, and browser binaries (Chromium, Firefox, WebKit) to the user's home directory (~/.boxlang/playwright). This is standard functionality for the Playwright framework to enable browser automation.
  • [COMMAND_EXECUTION]: The skill documentation includes various CLI commands for managing the automation environment, such as bxPlaywright doctor for system checks, bxPlaywright codegen for recording browser actions, and bxPlaywright screenshot for capturing web pages. These commands are typical for developer tooling.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides capabilities to interact with external URLs through commands like open, codegen, and screenshot. This constitutes an ingestion surface for untrusted data from the web.
  • Ingestion points: URLs provided to CLI verbs like open, codegen, screenshot, and pdf in SKILL.md.
  • Boundary markers: None explicitly defined in the setup documentation; the agent should apply its own safety boundaries when navigating to untrusted sites.
  • Capability inventory: The skill allows the agent to browse the web, generate code based on site interactions, and write files (screenshots, PDFs, and trace logs) to the local filesystem.
  • Sanitization: Not explicitly mentioned in this configuration skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 08:40 PM