webapp-testing

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • Indirect Prompt Injection (SAFE): The skill processes untrusted web content and logs, which is a standard risk for any browser automation tool. Given its primary purpose as a testing utility, this risk is considered acceptable. 1. Ingestion points: web page content and console logs. 2. Boundary markers: None. 3. Capability inventory: Browser navigation, UI interaction, and screenshot file writing. 4. Sanitization: None.
  • External Downloads (SAFE): The skill references Playwright, a trusted industry-standard library from Microsoft. Its automated installation is a safe and common procedure for testing frameworks.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:35 PM