playwright

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). High confidence: run.js calls execSync('npm install') and execSync('npx playwright install chromium') at runtime if Playwright is missing, which fetches and installs remote packages/binary installers from the npm registry and Playwright's download endpoints (i.e., remote code is downloaded and executed during skill runtime).