migrate-to-e2e
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from existing source test files (Playwright, Cypress, Selenium, etc.) and external documentation to perform migrations.
- Ingestion points: Source test files (e.g.,
.spec.ts,.yml,.maestro/), repository configuration files, and external migration guides hosted ate2e.tester.army. - Capability inventory: The agent has the ability to execute shell commands (via
npx), write new test files to the filesystem, and propose modifications to CI workflow files. - Boundary markers: The instructions do not specify explicit delimiters or "ignore previous instructions" warnings when processing the content of existing tests.
- Sanitization: There is no mention of sanitizing or escaping the logic found in existing tests before translating them into the new suite.
- [COMMAND_EXECUTION]: The skill utilizes several CLI tools to perform its tasks, including
npx e2e init,npx e2e run,npx playwright test --list, andmaestro test. It also includes a feedback mechanism that sends data externally vianpx e2e feedback. - [EXTERNAL_DOWNLOADS]: The skill references and retrieves documentation from
https://e2e.tester.army/docs/. These are vendor-owned resources associated with the skill author. - [DYNAMIC_EXECUTION]: The instructions include a fallback for importing legacy CommonJS modules by executing them in a child process using TypeScript runners like
ts-nodeortsx.
Audit Metadata