playwright-recording
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill automates browser navigation to external websites which could contain malicious content or instructions. * Ingestion points:
page.goto(url)andpage.goto(CONFIG.url)calls inSKILL.mdandreference.md. * Boundary markers: No delimiters or warnings are provided to the agent regarding instructions potentially embedded in the targeted web pages. * Capability inventory: The skill utilizesfsfor file manipulation,execSyncfor shell command execution, and Playwright for full browser control. * Sanitization: No sanitization or filtering of external web content is performed. - [COMMAND_EXECUTION]: The skill uses shell commands to process video files. * Uses
child_process.execSyncinreference.mdto executeffprobefor duration calculation. * Suggests the use offfmpeginSKILL.mdfor video conversion. - [EXTERNAL_DOWNLOADS]: The skill fetches external packages and browser binaries from well-known official sources. *
npm install -D playwright @playwright/testinstalls standard browser automation libraries. *npx playwright install chromiumdownloads Chromium binaries from the Playwright official repository.
Audit Metadata