playwright-interactive
Warn
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill requires disabling the agent's security sandbox by recommending the
--sandbox danger-full-accessflag to allow Playwright to control host-level browser processes. - [EXTERNAL_DOWNLOADS]: Setup involves downloading the
playwrightpackage and Chromium browser binaries from Microsoft's official sources. - [COMMAND_EXECUTION]: The instructions include executing shell commands for environment setup, package installation, and verification using
npmandnode. - [DYNAMIC_EXECUTION]: The skill makes extensive use of a persistent
js_replto interactively execute JavaScript automation code. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from external web pages and local development servers, posing a risk of indirect instruction injection from those sources, especially with the sandbox disabled.
Audit Metadata