playwright-recording
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends installing playwright and @playwright/test from npm, which are standard and trusted tools for browser automation.
- [COMMAND_EXECUTION]: Provides code snippets using execSync to run ffprobe and suggests terminal commands for ffmpeg to extract video metadata and perform transcoding. These utilities are used for media handling on the local system.
- [DYNAMIC_EXECUTION]: Uses page.evaluate() to inject custom JavaScript and CSS into the browser for visual features like cursor highlighting, which is standard practice for Playwright-based demo recording.
- [INDIRECT_PROMPT_INJECTION]: The skill involves navigating to external websites via page.goto(), creating a surface for embedded instructions in untrusted web content to influence the agent. 1. Ingestion points: page.goto() calls throughout SKILL.md. 2. Boundary markers: None provided in the reference templates. 3. Capability inventory: Browser automation, file system writes (fs.renameSync), and local shell execution (execSync). 4. Sanitization: No explicit sanitization or input validation is implemented in the provided code snippets.
Audit Metadata