playwright-cli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt contains examples and commands that pass credentials and cookies as literal arguments (e.g., fill e2 "password123", cookie-set session_id abc123), which instructs the agent to embed secret values verbatim in generated CLI commands/outputs.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly opens and navigates arbitrary external URLs (playwright-cli open/goto in SKILL.md) and its run-code examples (references/running-code.md) show returning page.content and scraping multiple pages, so untrusted public web content is fetched and used to drive actions and decisions, enabling indirect prompt injection.