playwright-expert

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the generation and execution of test code based on user-provided requirements, which introduces a potential surface for processing malicious instructions.
  • Ingestion points: User-provided test scenarios and application requirements described during the interaction (SKILL.md).
  • Boundary markers: Absent. The instructions do not define delimiters or specific warnings to ignore instructions embedded within the test requirements.
  • Capability inventory: The skill utilizes CLI commands through Playwright and npm for testing and development (references/configuration.md).
  • Sanitization: Absent. There is no mechanism described for validating or escaping user-provided data before it is incorporated into generated scripts.
  • [METADATA_POISONING]: The 'author' field in the skill metadata refers to 'https://github.com/Jeffallan', which is inconsistent with the 'zroman88' author identity provided in the skill context.
  • [REMOTE_CODE_EXECUTION]: The skill recommends installing Playwright browsers and dependencies using 'npx playwright install --with-deps'. This is a standard procedure for the Playwright framework, which is a well-known service.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 10:32 AM
Security Audit — agent-trust-hub — playwright-expert