playwright-stealth-job

This module is primarily a high-capability browser automation harness that executes untrusted job Python code via exec_module without sandboxing. Although it includes an AST-based lint gate to discourage certain interaction patterns and hardcoded secret literals, it does not restrict general Python capabilities inside job modules (imports, filesystem/network/process actions). The runner also persists sensitive browser state on failure (HTML/url/screenshot/trace). No direct malware behavior is evident in this fragment, but supply-chain/sabotage risk is meaningful because any malicious or compromised job file can leverage the runner’s secret and browser access to steal data or perform unwanted actions.