playwright-cli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes concrete examples that set and retrieve secrets verbatim (e.g., cookie-set session_id abc123, fill ... "password123", and TOKEN=$(playwright-cli --raw cookie-get session_id)), which forces the agent to handle and potentially emit secret values directly.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill (“playwright-cli”) ingests outsider-authored free text whenever a user supplies URLs to open/navigate and then the LLM reads page content via snapshot/find/eval (e.g., navigating to an attacker-controlled page and using playwright-cli snapshot/playwright-cli find to process its text).