playwright-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md and run.js plus lib/helpers.js demonstrate that the agent navigates to and scrapes arbitrary public URLs (page.goto, page.request.head in the "Check for Broken Links" snippet, extractTableData/page.evaluate, handleCookieBanner, and by accepting user-provided/external TARGET_URLs or inline code), meaning untrusted web content is fetched and interpreted as part of the automation workflow and can alter actions the agent performs.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's runtime (run.js) automatically runs npm install and npx playwright install chromium, which downloads and executes remote code from the npm registry (https://registry.npmjs.org/) and Playwright's CDN (e.g., https://playwright.azureedge.net), so required external packages/binaries are fetched and executed at runtime.