cypress-playwright-setup
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The testing templates include commands to navigate to and interact with web pages (e.g.,
page.goto(),cy.visit()). This provides a potential surface where the agent, if performing these tests, could encounter instructions embedded in the target web content. - Ingestion points: Web navigation in
BasePage.ts(page.goto) andauth.cy.ts(cy.visit). - Boundary markers: None defined in the code templates, which is standard for test scripts.
- Capability inventory: The setup includes local shell command execution via the Playwright
webServerconfiguration. - Sanitization: No content sanitization is present as the tool is intended for testing specific application states.
- [DYNAMIC_EXECUTION]: The Playwright configuration utilizes the
webServerproperty to execute the shell commandnpm run startto ensure the application environment is ready for testing. - [EXTERNAL_DOWNLOADS]: The skill instructs the installation of standard, well-known testing frameworks and utilities from official registries. These include
playwright,cypress, and accessibility auditing libraries. All targeted tools are from recognized technology providers.
Audit Metadata