playwright
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
SecuritySecurityrun.js
MEDIUMSecurityMEDIUM
run.js
The fragment is an automation runner intentionally designed to execute arbitrary JavaScript through Playwright. It contains no clear evidence of malware or covert exfiltration in the supplied code. Runtime dependency installation creates a supply-chain and arbitrary lifecycle-script execution risk, while predictable temporary-file handling presents a local symlink/race concern. Untrusted input must not be passed to this utility because it executes with full Node.js process privileges.
Confidence: 97%Severity: 72%
Audit Metadata