playwright-automation-expert
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [SAFE]: The skill demonstrates a high awareness of security by explicitly instructing users to gitignore sensitive authentication files (auth.json) and forbidding the storage of credentials in source control. No malicious instructions or prompt injections were found.
- [COMMAND_EXECUTION]: The provided script
scripts/scaffold.mjsis a utility for project initialization. It performs standard, non-malicious file system operations (creating directories and writing initial configuration files) to set up the recommended project structure. - [EXTERNAL_DOWNLOADS]: The skill documentation guides users to install the Playwright testing framework and official browser binaries from well-known and trusted sources like the npm registry.
- [CREDENTIALS_UNSAFE]: Reference documentation for API testing and configuration contains dummy credentials (e.g., 'user@test.com', 'password123') used strictly as illustrative placeholders for fixture setup. These do not pose a security risk as they are intended for educational purposes and are accompanied by warnings against hardcoding real secrets.
Audit Metadata