playwright-skill

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Security
SecurityMEDIUM
run.js

This is an explicit JavaScript automation executor, not evidence of concealed malware. Its primary risk is inherent execution of untrusted input with full Node.js process privileges, compounded by automatic npm installation and lifecycle-script execution when Playwright is missing. Use only with trusted code and a trusted package directory.

Confidence: 99%Severity: 76%
Audit Metadata
Analyzed At
Sep 24, 2026, 05:09 AM
Package URL
pkg:socket/skills-sh/appautomaton%2Fwebmaton%2Fplaywright-skill%2F@e88d92f1a661589d29070b10c185071dd19ed72f8c1ae15c93af01d93a6a908d