playwright-devops
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Standard Command Execution: The skill uses
gh(GitHub CLI) andjqto fetch and parse workflow run data from themicrosoft/playwrightrepository. These are standard DevOps operations. - Local File Operations: The script saves logs to a temporary directory in the user's home folder (
~/tmp/commit-<sha>/). This is common practice for analysis tools and follows least-privilege principles. - Trusted Repository: The skill is configured to interact with the official
microsoft/playwrightrepository, which matches the stated vendor context. - No Remote Code/Downloads: The skill does not download external scripts or execute remote payloads; all logic is contained within the provided shell script.
Audit Metadata