playwright-cli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes commands that set or get cookies and storage and explicit examples embedding secrets verbatim on the command line (e.g., cookie-set session_id abc123, fill e2 "password123"), which requires the LLM to produce outputs containing secret values and thus poses an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's documented workflow (e.g., "playwright-cli open" / "goto", snapshot, eval, page.content, and the run-code examples in SKILL.md and references/*) explicitly fetches and inspects arbitrary public web pages and network responses, so untrusted third‑party (user-generated/public website) content is read and can directly influence subsequent actions like scraping, generated test code, routing/mocking, and run-code logic.