playwright-testing
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides structured templates and documentation for modern web testing using Playwright. All provided code follows industry-standard patterns for Page Object Model and component testing.
- [EXTERNAL_DOWNLOADS]: The
init-playwright.tsscript automates the installation of the framework's core dependencies from the official NPM registry and downloads official browser binaries. These operations target well-known, trusted sources necessary for the skill's functionality. - [COMMAND_EXECUTION]: Maintenance and setup scripts use
execSyncto execute local shell commands, such asnpm installfor dependency management andcomparefor image analysis in visual regression tests. These are legitimate uses of command execution within a developer tool context. - [PROMPT_INJECTION]: The
generate-page-object.tsscript includes a capability to scrape external URLs (Ingestion point) to generate code scaffolding. While this processes untrusted data (Sanitization: none), the scope is restricted to generating local file content and does not impact the agent's system instructions or safety constraints (Capability inventory: fs.writeFile).
Audit Metadata