playwright-migration
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The migration guides instruct the agent on how to refactor existing test suites from Cypress or Selenium into Playwright. This process requires the agent to ingest and process user-provided source files, which creates a surface for indirect instructions embedded in the source code to influence the agent's behavior.\n
- Ingestion points: The Cypress and Selenium source code files and configuration scripts intended for migration (from-cypress.md, from-selenium.md).\n
- Boundary markers: The skill does not provide specific delimiters or warnings to separate the source code being analyzed from the agent's migration instructions.\n
- Capability inventory: The migration process involves the agent writing new Playwright test files to the local file system and executing shell commands for framework initialization and browser installation (SKILL.md, from-cypress.md, from-selenium.md).\n
- Sanitization: No specific mechanisms are recommended for sanitizing or escaping content within the migrated tests to prevent command or prompt injection during the refactoring process.\n- [EXTERNAL_DOWNLOADS]: The skill recommends installing the Playwright framework and its associated browser binaries from Microsoft's official infrastructure using standard package managers (npm init playwright@latest and npx playwright install).
Audit Metadata