webapp-testing
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates processing external web content via
page.content()and console logs, creating a surface for indirect prompt injection. Malicious instructions on a target website could potentially influence the agent's behavior. - Ingestion points:
page.content()andpage.on('console', ...)inSKILL.md. - Boundary markers: Not present in the provided patterns.
- Capability inventory:
Bash,Write,Edit,Read,Glob, andGreptools. - Sanitization: No sanitization logic is included for handling ingested web data.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to run commands likepytest, which is standard for a testing toolkit.
Audit Metadata