playwright-testing
Pass
Audited by Gen Agent Trust Hub on May 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official testing libraries including
@playwright/testand@axe-core/playwrightvia the NPM registry, and references official GitHub Actions (actions/checkout,actions/setup-node) for CI/CD integration. - [COMMAND_EXECUTION]: Uses standard shell commands such as
npx playwright testandnpm init playwright@latestto manage test environments and execution. - [CREDENTIALS_UNSAFE]: Step 3 (Authentication Pattern) includes example credentials (
test@example.com/password123) within the instructional code blocks to demonstrate how to handle authentication state. - [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection where untrusted data could influence agent behavior:
- Ingestion points: Processes user prompts (e.g., 'test my login flow') to determine test logic and selectors in
SKILL.mdexamples. - Boundary markers: Absent; there are no instructions to the agent to treat user-provided app descriptions or URLs as untrusted or to isolate them from the generated script context.
- Capability inventory: The skill uses
npx playwright testfor execution andpage.gotofor browser navigation, which allows for local command execution and network operations. - Sanitization: Absent; the instructions do not include steps to sanitize user-provided strings before they are interpolated into test scripts or locators.
Audit Metadata