playwright-scraper-skill
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch data from arbitrary external URLs, creating an attack surface for indirect prompt injection where malicious instructions embedded in scraped websites could influence the agent's actions.
- Ingestion points: Untrusted web content is ingested through
scripts/playwright-simple.jsandscripts/playwright-stealth.jsbased on user-provided URLs. - Boundary markers: The skill does not implement specific delimiters or warnings to isolate ingested content from its own instructions.
- Capability inventory: The skill possesses network access for scraping and file-write capabilities for saving screenshots and HTML files to the local system.
- Sanitization: No sanitization or filtering is performed on the extracted web content to detect or neutralize potential prompt injection instructions.
- [EXTERNAL_DOWNLOADS]: The installation process involves downloading the Chromium browser binary using
npx playwright install chromium, which is a standard requirement for the well-known and trusted Playwright library.
Audit Metadata