playwright-trace-analyzer

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly requires extracting and reporting raw trace contents (e.g., "console / page errors captured verbatim" and network snapshots/requests), which forces the agent to read and potentially emit secrets (API keys, cookies, tokens) found in traces.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly downloads and unpacks artifacts from arbitrary GitHub Actions run URLs via scripts/fetch-gh-run.mjs (using gh run download) and then parses trace.zip contents (trace.trace / trace.network) with scripts/trace-extract.mjs/trace-summary.mjs as a required part of its workflow, so it ingests untrusted, user-generated third-party content from GitHub/artifacts that directly drives analysis and recommended actions.