playwright-expert
Fail
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONMETADATA_POISONING
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an external documentation page on jeffallan.github.io that has been explicitly flagged as malicious and blacklisted by automated scanners. External links to blacklisted domains pose a severe risk of phishing or malware delivery.
- [COMMAND_EXECUTION]: The documentation includes instructions for executing shell commands and installing Playwright dependencies (npx playwright install). Given the malicious reputation alerts for the skill's source files and external links, executing these commands as instructed could facilitate the introduction of malicious payloads.
- [METADATA_POISONING]: Automated reputation scans identified the SKILL.md file itself as malicious (FileRepMalware). Additionally, there is a discrepancy between the metadata author and the expected vendor context, which can be used to misrepresent the origin and safety of the skill.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata