# Automate Browser Testing with Playwright

Manual browser checks are slow and easy to miss. This skill creates Playwright automation for page tests, forms, screenshots, responsive checks, and link checks.

## Install

```bash
npx skillstore add lackeyjb/playwright-skill
```

## Metadata

- Status: approved
- Slug: lackeyjb-playwright-skill
- Skillstore revision: r1
- Version status: missing
- Tree hash: 48165f6ef28dfb1df1a8f789050fcdde3c8b9e41e8237eb44a10125d6852aade
- Author: lackeyjb
- GitHub username: lackeyjb
- License: MIT
- Repository: https://github.com/lackeyjb/playwright-skill/tree/main/skills/playwright-skill/
- Ref: b8ca75d2c0a7e7102978993058777d82b8ab2610
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: blocked
- Manual install advisory: allowed\_with\_warning
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, network, filesystem, env\_access, scripts
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/lackeyjb-playwright-skill
- Manifest: https://skillstore.pages.dev/api/skills/lackeyjb-playwright-skill/manifest

## Capabilities

- Detects running localhost development servers on common ports.
- Runs Playwright scripts through a local Node executor.
- Creates screenshots for desktop, tablet, and mobile viewports.
- Automates clicks, typing, login flows, and form submission checks.
- Checks links, page titles, console output, and selected UI states.
- Adds optional custom HTTP headers from configured environment variables.

## Use Cases

- Validate a Local Web App: Detect the active dev server, open key pages, and report obvious UI or navigation failures.
- Check Release Flows: Exercise login, forms, redirects, and broken links before a deployment or demo.
- Capture Responsive Evidence: Create screenshots across common device sizes for review, bug reports, or design acceptance.

## Prompt Templates

### Test One Page

```
Detect my local dev server, open the main page, take desktop and mobile screenshots, and report visible layout issues.
```

### Verify a Login Flow

```
Test the login flow on my local app. Ask for credentials if needed, then verify redirect behavior and visible success indicators.
```

### Audit Links and Forms

```
Check important links and one contact form on the provided URL. Report broken links, failed submissions, and console errors.
```

### Run a Full Browser Review

```
Create a Playwright review for TARGET_URL covering responsive screenshots, login, broken links, console errors, and page readiness. Ask before running commands.
```

## Limitations

- It requires Playwright and browser dependencies on the local machine.
- It executes generated JavaScript, so untrusted tasks need careful review.
- External websites may block automation or require manual authentication.
- Visual quality judgments still need human review of screenshots.

## Best Practices

- Review generated scripts before running them against sensitive systems.
- Use test accounts and temporary data for login and form checks.
- Limit custom headers to trusted target origins.

## Anti Patterns

- Do not run arbitrary browser scripts from untrusted prompts without review.
- Do not send production credentials through environment headers by default.
- Do not treat screenshots as a complete accessibility or security audit.

## Security Audit

- Audited at: 2026-07-06T18:43:26.055\+00:00
- Summary: Most static findings are false positives from Markdown examples and JavaScript template literals. Real risks remain in the local JavaScript executor, automatic installation commands, disabled Chromium sandbox flags, localhost port probing, and environment-derived request headers.

## Stats

- Views: 133
- Downloads: 17
- Favorites: 0
- Popularity score: 0
