update-chrome-binaries-test-region

Fail

Audited by Snyk on Jul 15, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). The GitHub Playwright URL is an official, low-risk reference, but the remotion.media entry points to direct hosted Chromium binary downloads on a third-party host (personal file hosting for executables), which is a high-risk pattern for distributing malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.65). The required workflow can fetch outsider-authored free text from the public web at runtime by looking up the Playwright revision in https://github.com/microsoft/playwright/.../browsers.json, which the agent would then use to update local files and potentially feed into the LLM context.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 15, 2026, 01:13 PM
Issues
2
Security Audit — snyk — update-chrome-binaries-test-region