babylon-qa-release
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the
playwrightlibrary and its associated browser binaries (vianpx playwright install chromium). These are well-known, industry-standard tools for automated web testing and browser automation. - [COMMAND_EXECUTION]: The skill facilitates the execution of a local Node.js script (
scripts/inspect-babylon-canvas.mjs) to capture screenshots, evaluate game diagnostics, and compute rendering metrics. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it ingests untrusted data from the browser environment, specifically console logs and page errors, which are then included in the agent's context for verification.
- Ingestion points: Browser console output and error messages captured by
scripts/inspect-babylon-canvas.mjsduring the automated testing phase. - Boundary markers: The skill does not utilize specific delimiters or instructions to ignore potential commands embedded within the captured logs.
- Capability inventory: The skill possesses capabilities to execute shell commands, manage files, and perform deployment tasks.
- Sanitization: No sanitization or filtering is applied to the browser logs before they are processed by the agent.
Audit Metadata