Compétences playwright-best-practices

📦

playwright-best-practices

Name: playwright-best-practices
Author: currents-dev

v1.2 Révision du contenu r1 Risque moyen ⚙️ Commandes externes🌐 Accès réseau📁 Accès au système de fichiers⚡ Contient des scripts🔑 Variables d’environnement

Build Reliable Playwright Tests

Fragile tests and inconsistent setup make browser testing difficult to maintain. This skill provides practical Playwright patterns for test design, debugging, and CI workflows.

Prend en charge: Claude Codex Code(CC)

⚠️ 50 Médiocre

Maintain this Skill? Claim it ⚠️ 50 Médiocre

Arrêtez-vous et demandez confirmation avant l’installation.

Examinez le plan et obtenez le consentement explicite de l’utilisateur avant de modifier des fichiers.

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "playwright-best-practices" from https://skillstore.io/skills/currents-dev-playwright-best-practices.md and its manifest at https://skillstore.io/api/skills/currents-dev-playwright-best-practices/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/currents-dev-playwright-best-practices.md manifest signé GET /api/skills/currents-dev-playwright-best-practices/manifest lockfile signé GET /api/skills/currents-dev-playwright-best-practices/lockfile

Tester

Utilisation de « playwright-best-practices ». A checkout test sometimes fails after clicking Submit.

Résultat attendu:

Diagnosis: the assertion runs before the checkout response updates the page.
Recommended change: register the response wait before clicking, then assert the confirmation heading.
Verification: repeat the test and inspect traces for any remaining ordering failures.

Utilisation de « playwright-best-practices ». Plan a faster Playwright workflow for our CI pipeline.

Résultat attendu:

Execution plan: divide tests across shards and isolate data by worker.
Dependency plan: align browser binaries with the installed Playwright version and cache them using the dependency lockfile.
Reporting plan: retain failure traces and merge shard reports into one result.
Safety check: verify disposable database targets before reset or restore operations.

Audit de sécurité

Risque moyen

v1 • 29/10/2026 Ouvrir le rapport versionné

Most presented alerts are benign Playwright examples; no evidence found of keylogging, prompt injection, or malicious exfiltration in reviewed context. Confirmed risks involve unguarded database operations, predictable temporary files, and indiscriminate process termination; HAR commit guidance adds a data-disclosure concern. All 400 presented findings were adjudicated; 888 omitted matches still require manual review before automatic publication. Static review was capped at 400/1288 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Fichiers analysés

26,413

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Préoccupations de sécurité confirmées (1)

Moyen

architecture/when-to-mock.md:160-169 architecture/when-to-mock.md:187-192

HAR Commit Guidance Omits Secret Redaction

The guide says 'Commit `.har` files to version control' after recording staging admin API traffic. Without redaction, recordings can disclose authorization headers, cookies, or sensitive response bodies through repository history.

The recording and commit recommendation are explicit, but no captured HAR was supplied. This confirms unsafe guidance, not an observed credential leak.

Éléments d’évaluation des capacités (7)

Il s’agit de capacités locales réelles qui peuvent être attendues pour cette compétence ; elles nécessitent donc un examen, mais ne sont pas comptabilisées comme comportement malveillant confirmé.

Élevé

core/global-setup.md:163

Database connection strings

execSync(`psql $DATABASE_URL < ${SNAPSHOT_PATH}`, { stdio: "inherit" });

core/global-setup.md:163: The snapshot restore executes SQL against DATABASE_URL without verifying a disposable test database. A misconfigured connection can modify a non-test database.

Élevé

core/configuration.md:266

Synchronous process execution

execSync('npx prisma db push --force-reset', { stdio: 'inherit' });

core/configuration.md:266: Teardown invokes Prisma with --force-reset without validating the database target. An inherited production connection could cause irreversible data loss.

Élevé

core/global-setup.md:163

Synchronous process execution

execSync(`psql $DATABASE_URL < ${SNAPSHOT_PATH}`, { stdio: "inherit" });

core/global-setup.md:163: The snapshot restore executes SQL against DATABASE_URL without verifying a disposable test database. A misconfigured connection can modify a non-test database.

Moyen

debugging/flaky-tests.md:306

Node.js fs operations

fs.writeFileSync(file, "{}");

debugging/flaky-tests.md:306: The timestamp-based shared /tmp path is opened with writeFileSync without exclusive creation. Another local user could precreate a symlink and cause file truncation.

Moyen

debugging/flaky-tests.md:306

Synchronous file operations

fs.writeFileSync(file, "{}");

debugging/flaky-tests.md:306: The timestamp-based shared /tmp path is opened with writeFileSync without exclusive creation. Another local user could precreate a symlink and cause file truncation.

Moyen

debugging/flaky-tests.md:305

Temp directory access

const file = `/tmp/test-${Date.now()}.json`;

debugging/flaky-tests.md:305: The timestamp-based shared /tmp path is opened with writeFileSync without exclusive creation. Another local user could precreate a symlink and cause file truncation.

Moyen

infrastructure-ci-cd/github-actions.md:519

xargs command (can execute arbitrary commands)

run: lsof -ti:3000 | xargs kill -9 2>/dev/null || true

infrastructure-ci-cd/github-actions.md:519: The command force-kills every process returned for port 3000 without checking ownership by this test run. Shared runners could lose unrelated services.

Facteurs de risque

⚙️ Commandes externes (50)

🌐 Accès réseau (50)

📁 Accès au système de fichiers (50)

⚡ Contient des scripts (4)

advanced/authentication.md:467 architecture/pom-vs-fixtures.md:141 core/configuration.md:254 core/configuration.md:265

🔑 Variables d’environnement (50)

advanced/authentication.md:108 advanced/authentication.md:109 advanced/authentication.md:201 advanced/authentication.md:206 advanced/authentication.md:211 advanced/authentication.md:443 advanced/authentication.md:491 advanced/authentication.md:492 advanced/authentication.md:627 advanced/authentication.md:628 advanced/authentication.md:108 advanced/authentication.md:109 advanced/authentication.md:201 advanced/authentication.md:206 advanced/authentication.md:211 advanced/authentication.md:443 advanced/authentication.md:491 advanced/authentication.md:492 advanced/authentication.md:627 advanced/authentication.md:628 advanced/third-party.md:331 advanced/third-party.md:344 advanced/third-party.md:331 advanced/third-party.md:344 advanced/third-party.md:331 advanced/third-party.md:344 architecture/when-to-mock.md:204 architecture/when-to-mock.md:219 architecture/when-to-mock.md:234 architecture/when-to-mock.md:246 architecture/when-to-mock.md:204 architecture/when-to-mock.md:219 architecture/when-to-mock.md:234 architecture/when-to-mock.md:246 core/annotations.md:39 core/annotations.md:53 core/annotations.md:88 core/annotations.md:356 core/annotations.md:366 core/annotations.md:39 core/annotations.md:53 core/annotations.md:88 core/annotations.md:356 core/annotations.md:366 core/configuration.md:44 core/configuration.md:83 core/configuration.md:84 core/configuration.md:85 core/configuration.md:87 core/configuration.md:95

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/currents-dev-playwright-best-practices/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/currents-dev-playwright-best-practices/security.svg)](https://skillstore.io/skills/currents-dev-playwright-best-practices?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/currents-dev-playwright-best-practices?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/currents-dev-playwright-best-practices/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/currents-dev-playwright-best-practices.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

currents-dev. (2026). playwright-best-practices security audit report (audit version 1) [Author version 1.2]. Skillstore. https://skillstore.io/skills/currents-dev-playwright-best-practices/audits/1

Citation BibTeX

@techreport{currents-dev-currents-dev-playwright-best-practices-2026,
  author = {currents-dev},
  title = {playwright-best-practices security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/currents-dev-playwright-best-practices/audits/1},
  note = {Author version 1.2}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "playwright-best-practices security audit report (audit version 1)"
version: "1.2"
type: report
authors:
  - name: "currents-dev"
date-released: "2026-10-29"
url: "https://skillstore.io/skills/currents-dev-playwright-best-practices/audits/1"
identifiers:
  - type: other
    value: "skillstore:currents-dev-playwright-best-practices:audit:1"
    description: "Skillstore immutable audit report identifier"

Comparer les variantes

3 variantes installables

Chaque auteur reste un skill installable distinct. La variante recommandée est classée selon les preuves Skillstore.

Pourquoi cette variante est première

Meilleur score Skillstore

Auteur / source Score Skillstore Niveau de confiance des preuves Utilisation Skillstore Mis à jour

0xBigBoss Recommandé

0xbigboss-playwright-best-practices

Score Skillstore 79

Niveau de confiance des preuves Élevé

Utilisation Skillstore 89

Mis à jour

2026-10-11

currents-dev Actuelle

currents-dev-playwright-best-practices

Score Skillstore 50

Niveau de confiance des preuves Moyen

Utilisation Skillstore Inconnu

Mis à jour

2026-10-29

vitalics

vitalics-playwright-best-practices

Score Skillstore 38

Niveau de confiance des preuves Moyen

Utilisation Skillstore 20

Mis à jour

2026-09-09

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Add Maintainable Browser Tests

Create application tests with accessible locators, reusable setup, and assertions tied to visible behavior.

Investigate Intermittent Failures

Review flaky tests for timing errors, shared state, unstable selectors, and missing network synchronization.

Improve CI Test Workflows

Plan browser installation, caching, sharding, reports, and controlled environment setup for automated test runs.

Essayez ces prompts

Write a First Browser Test

Write a Playwright test for the login flow in this project. Use accessible locators and auto-waiting assertions. Identify missing application details before assuming selectors.

Fix a Flaky Test

Review this failing Playwright test and its error output. Identify timing, locator, and isolation problems. Propose focused fixes and repeated-run verification without hiding failures.

Design Authentication Fixtures

Design Playwright fixtures for admin and member workflows in this project. Isolate worker data and protect saved authentication state. Explain which external services need mocks.

Review a Sharded CI Pipeline

Review this Playwright CI configuration for sharding, caching, reports, and database lifecycle. Restrict destructive operations to disposable test resources. Require approval before destructive changes.

Bonnes pratiques

Use accessible locators and auto-waiting assertions that describe observable application behavior.
Isolate test data and authentication state; keep credentials and sanitized recordings out of unintended publication paths.
Review destructive setup commands before execution and verify changes with targeted, repeated test runs.

Éviter

Replacing reliable synchronization with fixed sleeps or excessive retries.
Sharing mutable users, sessions, or database state across parallel workers without isolation.
Running database resets against unverified targets or committing recordings without secret redaction.

Foire aux questions

Does this skill install Playwright or run browsers automatically?

No. It provides guidance and examples. Browser execution requires an available tool environment, installed dependencies, and project configuration.

Can I use it with Claude, Codex, and Claude Code?

The skill declares support for all three tools. Available file access and command execution depend on your configured environment.

Which test types does it cover?

It covers end-to-end, API, component, visual, accessibility, security, and performance testing, with additional Electron and browser extension examples.

Can it help with flaky tests?

Yes. It documents trace analysis, locator improvements, synchronization, test isolation, and repeated runs. Application-specific evidence is still required.

Should every service be mocked?

No. The guidance favors real application integrations and controlled mocks for external services. Select boundaries according to the behavior under test.

Are database cleanup examples safe to copy unchanged?

No. Validate disposable test targets and require approval for destructive operations. Protect credentials, saved sessions, and recorded traffic before sharing artifacts.

Détails du développeur

Auteur

currents-dev

Licence

MIT

Version de l’auteur

v1.2

Révision Skillstore

Avis de version

La version déclarée par l’auteur n’est pas un SemVer valide.

Dépôt

https://github.com/currents-dev/playwright-best-practices-skill/tree/283d5cbc5d11aac1abda058b16ad22c317d54dc0/playwright-best-practices

Réf

852767f17b3e9a2317cd8302fd137de70411b33f

Récence de maintenance

29/10/2026

Utilisation

0 téléchargements · 0 vues

Structure de fichiers

📁 advanced/

📄 authentication-flows.md

📄 authentication.md

📄 clock-mocking.md

📄 mobile-testing.md

📄 multi-context.md

📄 multi-user.md

📄 network-advanced.md

📄 third-party.md

📁 architecture/

📄 pom-vs-fixtures.md

📄 test-architecture.md

📄 when-to-mock.md

📁 browser-apis/

📄 browser-apis.md

📄 iframes.md

📄 service-workers.md

📄 websockets.md

📁 core/

📄 annotations.md

📄 assertions-waiting.md

📄 configuration.md

📄 fixtures-hooks.md

📄 global-setup.md

📄 locators.md

📄 page-object-model.md

📄 projects-dependencies.md

📄 test-data.md

📄 test-suite-structure.md

📄 test-tags.md

📁 debugging/

📄 console-errors.md

📄 debugging.md

📄 error-testing.md

📄 flaky-tests.md

📁 frameworks/

📄 angular.md

📄 nextjs.md

📄 react.md

📄 vue.md

📁 infrastructure-ci-cd/

📄 ci-cd.md

📄 docker.md

📄 github-actions.md

📄 gitlab.md

📄 other-providers.md

📄 parallel-sharding.md

📄 performance.md

📄 reporting.md

📄 test-coverage.md

📄 SKILL.md

📁 testing-patterns/

📄 accessibility.md

📄 api-testing.md

📄 browser-extensions.md

📄 canvas-webgl.md

📄 component-testing.md

📄 drag-drop.md

📄 electron.md

📄 file-operations.md

📄 file-upload-download.md

📄 forms-validation.md

📄 graphql-testing.md

📄 i18n.md

📄 performance-testing.md

📄 security-testing.md

📄 visual-regression.md

Tout afficher

📦

playwright-testing

Améliorer la couverture des tests Playwright

par C0ntr0lledCha0s

Les suites Playwright peuvent devenir instables lorsque la configuration, les locators et les fixtures sont incohérents. Cette compétence fournit des modèles pratiques pour des tests de navigateur fiables, le débogage et des page objects réutilisables.

Codage et développement Voir

📦

testing

Créer une automatisation de tests fiable

par 89jobrien

Les tests faibles ralentissent les livraisons et masquent les régressions. Cette compétence guide la stratégie de test, le TDD, l’automatisation, l’examen de la couverture et les vérifications web avec Playwright.

Codage et développement Voir

📦

testing-strategy

Élaborer une stratégie de test pratique

par Atman36

Les équipes ajoutent souvent des tests sans objectifs clairs de périmètre, d’outillage ou de couverture. Cette skill fournit un plan pratique pour les tests avec Vitest, Playwright et la CI.

Codage et développement Voir

📦

jest-testing

Créer des suites de tests Jest fiables

par C0ntr0lledCha0s

Les projets Jest ont souvent besoin de modèles cohérents pour la configuration, les mocks et les assertions. Cette skill fournit des conseils ciblés, des modèles et des vérifications pour les tests JavaScript, TypeScript, React et de style Vitest.

Codage et développement Voir

📦

webapp-testing

Créer des tests d’application web Playwright

par AutumnsGrove

Les tests manuels dans le navigateur sont lents et manquent souvent des régressions sur les formulaires, les appareils et les états réseau. Cette compétence aide Claude, Codex et Claude Code à créer des tests Playwright pratiques pour de vrais workflows web.

Codage et développement Voir

📦

debugging

Déboguer les erreurs et les causes profondes

par 89jobrien

Les erreurs et les incidents sont difficiles à trier lorsque les preuves sont réparties entre journaux, traces de pile et services. Cette skill structure le diagnostic, analyse les journaux, identifie les modèles et guide les correctifs minimaux.

Codage et développement Voir

playwright-best-practices

Installer avec mon Agent

Ressources lisibles par les agents

Tester

Audit de sécurité

Préoccupations de sécurité confirmées (1)

Facteurs de risque

Copier le lien du rapport

Badge Markdown

Badge HTML

Carte intégrable

Citation APA

Citation BibTeX

CITATION.cff

Comparer les variantes

Score Skillstore

Ce que vous pouvez créer

Add Maintainable Browser Tests

Investigate Intermittent Failures

Improve CI Test Workflows

Essayez ces prompts

Bonnes pratiques

Éviter

Foire aux questions

Détails du développeur

Compétences associées

playwright-testing

testing

testing-strategy

jest-testing

webapp-testing

debugging