dotnet-playwright
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
pwshanddotnet toolto install browser binaries and system dependencies. This is a standard and necessary part of the Playwright ecosystem for managing local execution environments. - [EXTERNAL_DOWNLOADS]: The framework downloads browser binaries (Chromium, Firefox, WebKit) from Microsoft's official distribution channels. These are recognized as trusted and well-known service providers.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it is designed to automate and interact with web browsers.
- Ingestion points: The agent interacts with external web content via
Page.GotoAsyncand locator-based assertions inSKILL.md. - Boundary markers: The code examples do not implement delimiters or specific instructions to ignore embedded content.
- Capability inventory: The skill allows for command execution via PowerShell, network navigation, and file system access for saving trace files in
SKILL.md. - Sanitization: Content retrieved from the browser is used directly in tests without specific sanitization steps.
Audit Metadata