playwright-cli

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/screencast-mjpeg.js

This script is a browser-screen streaming utility that connects to a local CDP endpoint and serves screenshots and page URL status over HTTP. Its primary security concern is unauthenticated access on all network interfaces, which can disclose sensitive browser contents and the current page URL to reachable clients. This is a high privacy and exposure risk when run on an untrusted or reachable network; the code does not show evidence of malware or external exfiltration.

Confidence: 99%Severity: 76%
Audit Metadata
Analyzed At
Oct 16, 2026, 10:45 AM
Package URL
pkg:socket/skills-sh/peachest%2Fskills%2Fplaywright-cli%2F@f4343d6d6686fd263e3b413b089fa6e9708f7b7255b88ab5d660b21ca7b76280