playwright-testing

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses official Playwright packages and follow recommended industry practices for testing.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing official dependencies from the npm registry (@playwright/test, @axe-core/playwright). These are well-known and trusted packages for the stated purpose.
  • [REMOTE_CODE_EXECUTION]: While the skill uses npx playwright install, this is the standard official command provided by Microsoft for setting up Playwright's browser binaries and dependencies. This is safe and expected behavior for this tool.
  • [COMMAND_EXECUTION]: Shell commands provided (npm init playwright, npm run dev) are standard development workflows. The webServer configuration in playwright.config.ts correctly points to local development scripts.
  • [DATA_EXPOSURE]: The skill handles authentication state by saving it to a local file (.auth/user.json). This is the official Playwright pattern for session reuse. The instructions show a placeholder email/password (test@example.com/password123) for demonstration purposes, which is not a risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 08:24 AM