Playwright Browser Automation

Warn

Audited by Socket on Aug 29, 2026

1 alert found:

Security
SecurityMEDIUM
run.js

No overt hidden malware payload is visible in this snippet, but it is inherently high-risk: it reads attacker-controlled JavaScript from argv/stdin or a file, writes it to disk, and executes it via require() with full Node privileges. It also auto-runs npm/npx commands to install Playwright and Chromium when missing, increasing supply-chain and execution risk. This should only be used in trusted environments with trusted input, or redesigned with sandboxing and strict execution controls.

Confidence: 78%Severity: 88%
Audit Metadata
Analyzed At
Aug 29, 2026, 08:17 PM
Package URL
pkg:socket/skills-sh/jackspace%2Fclaudeskillz%2Fplaywright-browser-automation%2F@03da40f6d2256e55b1c0c6de3c6251268939fe0b
Security Audit — socket — Playwright Browser Automation