playwright-skill

This module is primarily a high-risk execution harness: it ingests user-provided JavaScript from argv/file/stdin, writes it to disk, and executes it in-process via require(), yielding an effective arbitrary code execution primitive for anyone who can control the input. It also performs runtime package installation and Playwright browser binary installation via shell commands when Playwright is missing, increasing supply-chain and network exposure in CI/automation environments. No explicit exfiltration/backdoor logic is present in the snippet itself, but the capability for abuse is substantial.