playwright-ci-caching
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The provided
playwright.ps1script utilizes the PowerShell call operator (&) to execute the Playwright CLI executable after locating it within the project's dependency directories. This is a common pattern for build automation scripts to ensure cross-platform compatibility without hardcoding binary paths. - [EXTERNAL_DOWNLOADS]: The skill references production examples from the
petabridgeGitHub organization. These are well-known open-source projects in the .NET ecosystem and are used here for documentation purposes. - [INDIRECT_PROMPT_INJECTION]: The skill includes instructions to parse the
Directory.Packages.propsXML file to extract version metadata. While this represents a surface for processing untrusted project data, the implementation is restricted to specific XML paths and is a standard practice for Central Package Management in .NET environments.
Audit Metadata