Playwright MCP Server for Browser Automation
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the underlying Microsoft Playwright MCP package appears legitimate and same-purpose, but this skill mainly serves as a transitive installer from a third-party skills registry and grants high-impact browser automation over untrusted web content. No direct credential theft or malicious exfiltration is shown, yet the trust chain and action capability make it medium/high risk for an AI agent environment.
Confidence: 89%Severity: 72%
Audit Metadata