playwright-interactive

Warn

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: MEDIUMPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill requires disabling the agent's security sandbox by recommending the --sandbox danger-full-access flag to allow Playwright to control host-level browser processes.
  • [EXTERNAL_DOWNLOADS]: Setup involves downloading the playwright package and Chromium browser binaries from Microsoft's official sources.
  • [COMMAND_EXECUTION]: The instructions include executing shell commands for environment setup, package installation, and verification using npm and node.
  • [DYNAMIC_EXECUTION]: The skill makes extensive use of a persistent js_repl to interactively execute JavaScript automation code.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes content from external web pages and local development servers, posing a risk of indirect instruction injection from those sources, especially with the sandbox disabled.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 23, 2026, 02:33 PM