webapp-testing
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation indicates that it automatically installs the Playwright framework. Playwright is a standard, well-known tool for browser automation and testing.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface.
- Ingestion points: Untrusted data enters the agent's context through browser console logs captured by the
captureConsoleLogsfunction intest-helper.jsand through page content interaction defined inSKILL.md. - Boundary markers: The skill does not use delimiters or instructions to help the agent distinguish between application data and its own system instructions.
- Capability inventory: The skill possesses file-writing capabilities through the
captureScreenshotfunction intest-helper.js. - Sanitization: There is no logic provided to sanitize or filter the data ingested from the browser console or web page before the agent processes it.
Audit Metadata