webapp-testing
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill consists of legitimate documentation and code snippets for software testing. No malicious commands, obfuscation, or credential harvesting patterns were identified.
- [EXTERNAL_DOWNLOADS]: The skill references official Node.js packages (
@playwright/test,@axe-core/playwright). These are well-known, industry-standard libraries from trusted organizations used for automation and accessibility testing. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data through browser automation (interacting with web pages and console logs). While this is an ingestion point for untrusted data, it is the primary and expected function of a web testing skill. Standard agent safety protocols for browser interactions apply.
- [DYNAMIC_EXECUTION]: The skill provides templates for generating TypeScript testing scripts. This is classified as simple script generation from known templates for legitimate development purposes.
Audit Metadata