playwright-testing

Pass

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides structured templates and documentation for modern web testing using Playwright. All provided code follows industry-standard patterns for Page Object Model and component testing.
  • [EXTERNAL_DOWNLOADS]: The init-playwright.ts script automates the installation of the framework's core dependencies from the official NPM registry and downloads official browser binaries. These operations target well-known, trusted sources necessary for the skill's functionality.
  • [COMMAND_EXECUTION]: Maintenance and setup scripts use execSync to execute local shell commands, such as npm install for dependency management and compare for image analysis in visual regression tests. These are legitimate uses of command execution within a developer tool context.
  • [PROMPT_INJECTION]: The generate-page-object.ts script includes a capability to scrape external URLs (Ingestion point) to generate code scaffolding. While this processes untrusted data (Sanitization: none), the scope is restricted to generating local file content and does not impact the agent's system instructions or safety constraints (Capability inventory: fs.writeFile).
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 13, 2026, 03:28 PM