playwright-mcp-setup
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install the Chromium browser and the @playwright/mcp package using npx. These are official components of the well-known Playwright project by Microsoft.
- [COMMAND_EXECUTION]: Instructions involve running shell commands to install browser binaries and modifying the claude_desktop_config.json file. These are necessary steps for integrating the MCP server with the Claude Desktop application.
- [PROMPT_INJECTION]: Setting up browser control enables indirect prompt injection via the browser_navigate tool, which ingests untrusted data from the web. 1. Ingestion points: browser_navigate (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: browser_click, browser_type, browser_evaluate (SKILL.md). 4. Sanitization: Absent. This risk is inherent to the browser automation functionality.
Audit Metadata