playwright-devops

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Standard Command Execution: The skill uses gh (GitHub CLI) and jq to fetch and parse workflow run data from the microsoft/playwright repository. These are standard DevOps operations.
  • Local File Operations: The script saves logs to a temporary directory in the user's home folder (~/tmp/commit-<sha>/). This is common practice for analysis tools and follows least-privilege principles.
  • Trusted Repository: The skill is configured to interact with the official microsoft/playwright repository, which matches the stated vendor context.
  • No Remote Code/Downloads: The skill does not download external scripts or execute remote payloads; all logic is contained within the provided shell script.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:01 AM
Security Audit — agent-trust-hub — playwright-devops