playwright-cli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes commands that embed plaintext credentials (e.g., fill e2 "password123") and therefore instructs generating outputs that contain secret values verbatim, which creates an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow is browser automation (e.g., playwright-cli open https://... and subsequent snapshot/eval), which can ingest arbitrary outsider-authored web page text into the agent’s LLM context via page DOM/text extraction and snapshotting.