playwright

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
run.js

The fragment is an automation runner intentionally designed to execute arbitrary JavaScript through Playwright. It contains no clear evidence of malware or covert exfiltration in the supplied code. Runtime dependency installation creates a supply-chain and arbitrary lifecycle-script execution risk, while predictable temporary-file handling presents a local symlink/race concern. Untrusted input must not be passed to this utility because it executes with full Node.js process privileges.

Confidence: 97%Severity: 72%
Audit Metadata
Analyzed At
Sep 18, 2026, 06:59 AM
Package URL
pkg:socket/skills-sh/secondsky%2Fclaude-skills%2Fplaywright%2F@782968a94ea9fd92ed30318a8bd00be0c2ed4420e7bbdfb4211648081a96a46d