playwriter
Warn
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill utilizes
npx playwriter@latestto download and execute code from the npm registry at runtime. This software is provided by a third-party developer and is not from a recognized trusted organization. Additionally, the skill relies on theplaywriter skillcommand to fetch and load further instructions for the agent to follow. - [EXTERNAL_DOWNLOADS]: The setup instructions direct the user to install a third-party Chrome extension and fetch the CLI tool using package managers like
npxorbunxfrom external registries. - [COMMAND_EXECUTION]: The skill executes shell commands to initialize browser sessions and run arbitrary Playwright/JavaScript code snippets directly within the browser context via the
playwriter -eflag. - [DATA_EXFILTRATION]: The core functionality involves attaching to the user's existing Chrome instance. This grants the agent access to sensitive browsing data, including active session cookies and private extension data, which could be exposed or exfiltrated if the agent processes malicious inputs.
Audit Metadata