playwright-cli
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
playwright-clitool to execute browser actions and arbitrary JavaScript snippets within the browser context via therun-codeandevalsubcommands. - [EXTERNAL_DOWNLOADS]: Instructs the user to install the
@playwright/clipackage from the NPM registry. This tool is part of the Playwright ecosystem maintained by Microsoft, which is a trusted organization. - [CREDENTIALS_UNSAFE]: The skill handles sensitive browser session data through commands like
state-saveandcookie-list. The documentation provides clear guidance on preventing these files from being committed to version control and managing them securely. - [PROMPT_INJECTION]: The skill's ability to ingest content from web pages (via
snapshotoreval) and then use that data to drive browser actions (likeclickorrun-code) creates a surface for indirect prompt injection. This is a common characteristic of browser automation tools.
Audit Metadata