login-flows

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The skill demonstrates the use of Playwright's storageState feature to save authentication metadata (cookies and localStorage) to a file named auth.json. While this is a standard performance optimization for end-to-end testing, users should ensure this file is excluded from version control to prevent session hijacking.
  • [CREDENTIALS_UNSAFE]: One example (global-setup.ts) includes a hardcoded placeholder password testpass. Although clearly meant for demonstration, users must follow the skill's own tip to use environment variables for real credentials.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes standard, well-known NPM packages @playwright/test and otplib for its core functionality. These are reputable libraries used extensively in the web development and testing ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 04:07 AM