Skills playwright-skill

📦

playwright-skill

Name: playwright-skill
Author: lackeyjb

Content revision r1 Critical ⚙️ External commands🌐 Network access📁 Filesystem access🔑 Env variables⚡ Contains scripts

Automate Browser Testing with Playwright

Manual browser checks are slow and easy to miss. This skill creates Playwright automation for page tests, forms, screenshots, responsive checks, and link checks.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Do not auto-install this skill.

The canonical policy requires operator review before any installation action.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "playwright-skill" from https://skillstore.io/skills/lackeyjb-playwright-skill.md and its manifest at https://skillstore.io/api/skills/lackeyjb-playwright-skill/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/lackeyjb-playwright-skill.md Signed manifest GET /api/skills/lackeyjb-playwright-skill/manifest Signed lockfile GET /api/skills/lackeyjb-playwright-skill/lockfile

Test it

Using "playwright-skill". Test my marketing page on the running dev server.

Expected outcome:

Detected one local server and opened the marketing page.
Captured desktop and mobile screenshots in the temporary directory.
Reported a mobile navigation overlap and one missing call-to-action state.

Using "playwright-skill". Check whether login redirects correctly.

Expected outcome:

Opened the login page and submitted the provided test account.
Confirmed the dashboard redirect after successful login.
Noted one slow network request that delayed the ready state.

Using "playwright-skill". Find broken outbound links on this page.

Expected outcome:

Collected visible outbound links from the page.
Checked each link response and summarized failures.
Returned the broken link list with status codes and page context.

Security Audit

Critical

v4 • 7/6/2026 Open versioned report

Most static findings are false positives from Markdown examples and JavaScript template literals. Real risks remain in the local JavaScript executor, automatic installation commands, disabled Chromium sandbox flags, localhost port probing, and environment-derived request headers.

Files scanned

1,779

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (4)

Critical

run.js:52-73 run.js:121-173 run.js:201-209

Arbitrary JavaScript Execution Surface

run.js accepts automation code from a file path, inline argument, or stdin, writes it to a temporary file, and require()s it. A malicious or mistaken script can run with local Node permissions.

The code path from accepted input to generated file to require(tempFile) is direct. This is intentional executor behavior, but it is still arbitrary local code execution.

High

lib/helpers.js:47

UID/GID manipulation

args: ['--no-sandbox', '--disable-setuid-sandbox']

The browser launch args include --no-sandbox and --disable-setuid-sandbox. Disabling Chromium sandbox protections increases impact if browser content is compromised.

Medium

lib/helpers.js:15-28 lib/helpers.js:351-366

Environment Headers Can Be Forwarded to Visited Sites

The helper reads PW_HEADER_VALUE and PW_EXTRA_HEADERS from environment variables and merges them into browser extraHTTPHeaders. Secrets placed there can be sent to every target origin used with the helper.

The source environment variables are parsed and later assigned to extraHTTPHeaders. The risk depends on user configuration and target origin, so medium severity is appropriate.

Low

lib/helpers.js:392

System reconnaissance

hostname: 'localhost',

The helper probes common localhost ports to discover development servers. It is disclosed behavior, but it still enumerates local services.

Capability review items (22)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Critical

run.js:209

Dynamic require with variable

require(tempFile);

The executor require()s a temporary file built from file, argument, or stdin input. That is arbitrary JavaScript execution with local Node permissions.

High

run.js:15

Node.js child_process module

const { execSync } = require('child_process');

run.js imports child_process and later uses execSync for installation commands. The capability is real external command execution in the skill runtime.

High

run.js:38

Synchronous process execution

execSync('npm install', { stdio: 'inherit', cwd: __dirname });

The executor runs npm install automatically when Playwright is missing. That command can execute package lifecycle behavior and changes local dependencies.

High

run.js:39

Synchronous process execution

execSync('npx playwright install chromium', { stdio: 'inherit', cwd: __dirname });

The executor runs npx playwright install chromium as a synchronous external command. This performs network-backed installation work from the skill runtime.

High

run.js:121-156

Ruby/shell backtick execution

return `

This template literal embeds supplied automation code into a generated script. It is not Ruby execution, but it participates in arbitrary local JavaScript execution.

High

run.js:161-173

Ruby/shell backtick execution

return `

This wrapper builds executable JavaScript around supplied code when an async wrapper is missing. The generated code is later loaded by the executor.

High

run.js:205

Node.js fs operations

fs.writeFileSync(tempFile, code, 'utf8');

The executor writes generated automation code to a temporary JavaScript file. That file is then loaded, so the write is part of local code execution.

High

run.js:205

Synchronous file operations

fs.writeFileSync(tempFile, code, 'utf8');

The executor synchronously writes generated code to a temporary JavaScript file. The file becomes executable input for require().

Medium

lib/helpers.js:16

Environment variable access (dot notation)

const headerValue = process.env.PW_HEADER_VALUE;

The helper reads PW_HEADER_VALUE from process.env and can forward it as a browser header. Header values can contain tokens or other secrets.

Medium

lib/helpers.js:22

Environment variable access (dot notation)

const headersJson = process.env.PW_EXTRA_HEADERS;

The helper reads PW_EXTRA_HEADERS from process.env and parses arbitrary header values. Those values may include sensitive authentication material.

Medium

lib/helpers.js:16

Environment variable object

const headerValue = process.env.PW_HEADER_VALUE;

The helper accesses process.env for PW_HEADER_VALUE and can forward it to visited sites. This can expose sensitive user-provided header values.

Medium

lib/helpers.js:22

Environment variable object

const headersJson = process.env.PW_EXTRA_HEADERS;

The helper accesses process.env for PW_EXTRA_HEADERS and parses them into browser headers. This can forward sensitive values to target origins.

Medium

run.js:59

Node.js fs operations

return fs.readFileSync(filePath, 'utf8');

The executor reads a caller-provided file path as automation code. A mistaken or malicious path can expose local file contents to the execution path.

Medium

run.js:71

Node.js fs operations

return fs.readFileSync(0, 'utf8');

The executor reads stdin as automation code. The file descriptor is expected, but this still forms an unreviewed code input path.

Medium

run.js:59

Synchronous file operations

return fs.readFileSync(filePath, 'utf8');

The executor synchronously reads a caller-provided file path as automation code. This is real filesystem access tied to local code execution.

Medium

run.js:71

Synchronous file operations

return fs.readFileSync(0, 'utf8');

The executor synchronously reads stdin as automation code. The risk is the unreviewed code input path, not ordinary data storage.

Low

lib/helpers.js:391

HTTP/HTTPS request

const req = http.request({

detectDevServers sends HTTP HEAD requests to localhost ports. The scan is limited and documented, but it is real local network probing.

Low

lib/helpers.js:391

HTTP client library

const req = http.request({

The helper creates HTTP requests for localhost server detection. This is legitimate functionality, but it is still network activity from the skill.

Low

lib/helpers.js:399

Hardcoded URL

detectedServers.push(`http://localhost:${port}`);

The helper constructs localhost URLs for detected ports. The target is local and expected, so the security impact is low.

Low

lib/helpers.js:15

Environment variable access (dot notation)

const headerName = process.env.PW_HEADER_NAME;

The helper reads PW_HEADER_NAME from process.env for outgoing browser headers. This is user-configured, but it affects what the browser sends.

Low

lib/helpers.js:15

Environment variable object

const headerName = process.env.PW_HEADER_NAME;

The helper accesses process.env for PW_HEADER_NAME used in outgoing browser headers. This is expected but still environment-driven behavior.

Low

run.js:56

Node.js fs stat operations

if (args.length > 0 && fs.existsSync(args[0])) {

The executor tests a user-supplied argument as a filesystem path before reading it. This is expected for script input but still expands filesystem access.

Risk Factors

⚙️ External commands (90)

API_REFERENCE.md:502-503 API_REFERENCE.md:530-538 API_REFERENCE.md:602-603 lib/helpers.js:54 lib/helpers.js:134 lib/helpers.js:137 lib/helpers.js:187 lib/helpers.js:195 lib/helpers.js:271 lib/helpers.js:334 lib/helpers.js:399 lib/helpers.js:400 run.js:15 run.js:38 run.js:39 run.js:58 run.js:121-156 run.js:161-173 run.js:201 SKILL.md:7 SKILL.md:11 SKILL.md:12 SKILL.md:13 SKILL.md:23-25 SKILL.md:25-31 SKILL.md:31-33 SKILL.md:33-41 SKILL.md:41-42 SKILL.md:42-48 SKILL.md:48-51 SKILL.md:51-59 SKILL.md:59-61 SKILL.md:61-65 SKILL.md:65-84 SKILL.md:84-88 SKILL.md:88-90 SKILL.md:90-96 SKILL.md:96-118 SKILL.md:118-122 SKILL.md:122-132 SKILL.md:132-144 SKILL.md:144-148 SKILL.md:148-158 SKILL.md:158-171 SKILL.md:171-175 SKILL.md:175-201 SKILL.md:201-202 SKILL.md:202-206 SKILL.md:206-210 SKILL.md:210-235 SKILL.md:235-239 SKILL.md:239-257 SKILL.md:257-269 SKILL.md:269-277 SKILL.md:277-283 SKILL.md:283-293 SKILL.md:293-302 SKILL.md:302-304 SKILL.md:304-325 SKILL.md:325-327 SKILL.md:327-341 SKILL.md:341-344 SKILL.md:344-348 SKILL.md:348-351 SKILL.md:351-355 SKILL.md:355-357 SKILL.md:357-361 SKILL.md:361-363 SKILL.md:363-365 SKILL.md:365-369 SKILL.md:369-386 SKILL.md:386-387 SKILL.md:387 SKILL.md:388-389 SKILL.md:389-390 SKILL.md:390-391 SKILL.md:391-392 SKILL.md:392-393 SKILL.md:393 SKILL.md:395-401 SKILL.md:401-403 SKILL.md:403-406 SKILL.md:406-409 SKILL.md:409-412 SKILL.md:412-416 SKILL.md:416-427 SKILL.md:427-429 SKILL.md:429-444 SKILL.md:444-451 SKILL.md:451-452

🌐 Network access (21)

📁 Filesystem access (43)

🔑 Env variables (18)

API_REFERENCE.md:53 API_REFERENCE.md:54 API_REFERENCE.md:55 API_REFERENCE.md:72 API_REFERENCE.md:53 API_REFERENCE.md:54 API_REFERENCE.md:55 API_REFERENCE.md:72 lib/helpers.js:15 lib/helpers.js:16 lib/helpers.js:22 lib/helpers.js:45 lib/helpers.js:46 lib/helpers.js:15 lib/helpers.js:16 lib/helpers.js:22 lib/helpers.js:45 lib/helpers.js:46

⚡ Contains scripts (3)

lib/helpers.js:174 run.js:110 run.js:209

Detected Patterns

UID/GID manipulationSystem reconnaissance

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/lackeyjb-playwright-skill/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/lackeyjb-playwright-skill/security.svg)](https://skillstore.io/skills/lackeyjb-playwright-skill?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/lackeyjb-playwright-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/lackeyjb-playwright-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/lackeyjb-playwright-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

lackeyjb. (2026). playwright-skill security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/lackeyjb-playwright-skill/audits/4

BibTeX citation

@techreport{lackeyjb-lackeyjb-playwright-skill-2026,
  author = {lackeyjb},
  title = {playwright-skill security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/lackeyjb-playwright-skill/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "playwright-skill security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "lackeyjb"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/lackeyjb-playwright-skill/audits/4"
identifiers:
  - type: other
    value: "skillstore:lackeyjb-playwright-skill:audit:4"
    description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

sickn33 Recommended

sickn33-playwright-skill

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 26

Updated

2026-08-21

lackeyjb Current

lackeyjb-playwright-skill

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 17

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Validate a Local Web App

Detect the active dev server, open key pages, and report obvious UI or navigation failures.

Check Release Flows

Exercise login, forms, redirects, and broken links before a deployment or demo.

Capture Responsive Evidence

Create screenshots across common device sizes for review, bug reports, or design acceptance.

Try These Prompts

Test One Page

Detect my local dev server, open the main page, take desktop and mobile screenshots, and report visible layout issues.

Verify a Login Flow

Test the login flow on my local app. Ask for credentials if needed, then verify redirect behavior and visible success indicators.

Audit Links and Forms

Check important links and one contact form on the provided URL. Report broken links, failed submissions, and console errors.

Run a Full Browser Review

Create a Playwright review for TARGET_URL covering responsive screenshots, login, broken links, console errors, and page readiness. Ask before running commands.

Best Practices

Review generated scripts before running them against sensitive systems.
Use test accounts and temporary data for login and form checks.
Limit custom headers to trusted target origins.

Avoid

Do not run arbitrary browser scripts from untrusted prompts without review.
Do not send production credentials through environment headers by default.
Do not treat screenshots as a complete accessibility or security audit.

Frequently Asked Questions

Does this skill install Playwright?

The executor can run setup commands when Playwright is missing. Review installation commands before use in restricted environments.

Can it test local development servers?

Yes. It checks common localhost ports and can use the detected server for browser automation.

Can it test external websites?

Yes. Provide a URL and confirm that automated testing is allowed for that site.

Does it run in a visible browser?

The skill prefers visible browser runs unless headless mode is requested.

Where are temporary scripts and screenshots stored?

The instructions use temporary paths, usually under the system temporary directory.

What is the main security concern?

It executes generated JavaScript locally, so users should review scripts and avoid sensitive credentials.

Developer Details

Author

lackeyjb

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/lackeyjb/playwright-skill/tree/main/skills/playwright-skill/

Ref

b8ca75d2c0a7e7102978993058777d82b8ab2610

Maintenance freshness

7/18/2026

Usage

15 downloads · 133 views

File structure

📁 lib/

📄 helpers.js

📄 API_REFERENCE.md

📄 run.js

📄 SKILL.md