init-playwright

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs standard development packages (@playwright/test, @playwright/cli, playwright-mcp) from the public npm registry and uses the official Playwright installer to download the Chromium browser.
  • [COMMAND_EXECUTION]: The skill uses standard shell commands via pnpm and tasklist/taskkill (on Windows) to manage testing environments and ensure browser processes are correctly terminated after use. These are legitimate development operations.
  • [SAFE]: No evidence of prompt injection, data exfiltration, or code obfuscation was detected. The documentation explicitly addresses resource exhaustion risks (CPU 100% in headless mode), which serves as a defensive best practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 12:03 PM
Security Audit — agent-trust-hub — init-playwright