playwright-pro
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands, including
npx playwright testandnpx playwright show-trace, to automate browser testing workflows. - [EXTERNAL_DOWNLOADS]: Installation instructions include downloading browser engines and dependencies via
npx playwright install --with-deps. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes potentially untrusted data to generate and execute automation scripts.
- Ingestion points: Test generation based on external URLs, user stories, and acceptance criteria as described in
SKILL.md. - Boundary markers: Absent.
- Capability inventory: Includes file system writes, shell command execution (
npx playwright test), and browser-based network interaction. - Sanitization: No sanitization or validation of input data is mentioned.
Audit Metadata