Playwright MCP Server for Browser Automation

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the underlying Microsoft Playwright MCP package appears legitimate and same-purpose, but this skill mainly serves as a transitive installer from a third-party skills registry and grants high-impact browser automation over untrusted web content. No direct credential theft or malicious exfiltration is shown, yet the trust chain and action capability make it medium/high risk for an AI agent environment.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Mar 29, 2026, 03:36 AM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fplaywright-mcp-server-for-browser-automation%2F@820b8d078242e8852aa1301ea8fc807b89b0a0ee