📦
Audit History
playwriter - 1 audit
Audit version 1 Latest
Aug 21, 2026, 08:36 AM
All 19 backtick alerts are Markdown formatting rather than Ruby or shell backtick execution, and the hardcoded URL is a documentation link. Semantic review found high-risk live-tab script access and medium-risk unpinned package execution through npx.
2
Files scanned
87
Lines analyzed
4
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Arbitrary Scripts in an Authenticated Browser Tab
The skill supports clicks, typing, fetches, and arbitrary page evaluation in the user's active tab. Misuse could expose page data or perform account actions.
The instructions explicitly permit targeted browser actions and arbitrary page.evaluate code in the active Chrome tab.
Medium
Unpinned Package Download and Execution
The fallback uses npx -y without a package version, which can download and execute changing package content without confirmation.
Both cited lines explicitly recommend npx -y playwriter without a pinned version.
Risk Factors
⚙️ External commands (19)
🌐 Network access (1)
Audited by: codex