Playwright Visual Regression Suite

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The content is coherent with a Playwright visual regression skill and shows no credential harvesting, exfiltration, or hidden payloads. However, it primarily functions as a transitive installer, using an unpinned third-party `skills` CLI to fetch remote skill content, and includes an OpenClaw command that appears out of date with official docs. This is moderate supply-chain and transitive-trust risk, not confirmed malware.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Oct 14, 2026, 09:24 PM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fplaywright-visual-regression-suite%2F@c06d993afb9525bc523d5d09eee9d8709a8a4bb3