e2e-record

Pass

Audited by Gen Agent Trust Hub on Feb 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the standard 'npx playwright codegen' command to record browser interactions. This is the primary intended function for generating test scripts and is a legitimate development practice.
  • [EXTERNAL_DOWNLOADS]: The use of 'npx' may involve downloading the Playwright package from the official npm registry, which is a well-known and trusted service.
  • [PROMPT_INJECTION]: The skill ingests data from a local development server (localhost:4001) via browser recording. Ingestion points: Browser DOM via Playwright. Boundary markers: Absent. Capability inventory: Bash, Read, Write, Edit, Grep, Glob. Sanitization: Absent. As this is restricted to local development traffic for the purpose of test creation, it is considered safe.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 28, 2026, 05:00 AM