webapp-testing
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/with_server.pyusessubprocess.Popenwithshell=Trueto launch local development servers and execute test commands. This enables the agent to manage the lifecycle of the application under test. - [COMMAND_EXECUTION]: The skill provides patterns for executing arbitrary Playwright automation logic via Python scripts.
- [SAFE]: The documentation advises the agent to treat scripts in the
scripts/directory as black boxes to preserve context window space, which is an optimization for handling complex toolsets. - [SAFE]: The skill processes data from local web applications via Playwright. While this represents a potential surface for indirect instructions, the risk is minimal given the intended use-case of testing local code.
Audit Metadata