cypress-playwright-setup

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The testing templates include commands to navigate to and interact with web pages (e.g., page.goto(), cy.visit()). This provides a potential surface where the agent, if performing these tests, could encounter instructions embedded in the target web content.
  • Ingestion points: Web navigation in BasePage.ts (page.goto) and auth.cy.ts (cy.visit).
  • Boundary markers: None defined in the code templates, which is standard for test scripts.
  • Capability inventory: The setup includes local shell command execution via the Playwright webServer configuration.
  • Sanitization: No content sanitization is present as the tool is intended for testing specific application states.
  • [DYNAMIC_EXECUTION]: The Playwright configuration utilizes the webServer property to execute the shell command npm run start to ensure the application environment is ready for testing.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of standard, well-known testing frameworks and utilities from official registries. These include playwright, cypress, and accessibility auditing libraries. All targeted tools are from recognized technology providers.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 09:31 AM
Security Audit — agent-trust-hub — cypress-playwright-setup