playwright-bdd-step-definitions

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for implementing test steps that process data from Gherkin feature files through parameters, data tables, and doc strings. These serve as ingestion points for external data during test execution.\n
  • Ingestion points: Step definition parameters, DataTable rows/hashes, and docString content in SKILL.md examples.\n
  • Boundary markers: Relies on Gherkin syntax and Playwright BDD parsing logic to separate test data from instructions.\n
  • Capability inventory: Includes browser automation capabilities (page.goto, page.fill, page.click) and network API interactions (request.post) in SKILL.md examples.\n
  • Sanitization: Code examples show standard data handling like JSON.parse() for doc strings and parseInt() for numbers, though they do not include specific sanitization for free-text parameters.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 10:39 AM