Skills playwright-cli
📦
playwright-cli
Content revision r1 Medium Risk 🌐 Network access⚙️ External commands📁 Filesystem access
Automate Browser Tests with Playwright CLI
Manual browser testing slows debugging and test creation. This skill drives Playwright CLI sessions to inspect pages, record actions, mock requests, and capture evidence.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "playwright-cli" from https://skillstore.io/skills/microsoft-playwright-cli.md and its manifest at https://skillstore.io/api/skills/microsoft-playwright-cli/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "playwright-cli". Debug why the checkout submit button does not respond on staging.
Expected outcome:
- The assistant opens the staging checkout page and captures a snapshot of the form.
- It starts tracing, reproduces the click, and reviews console and network evidence.
- It summarizes likely causes and names the trace artifact for further inspection.
Using "playwright-cli". Create a login regression test from a browser session.
Expected outcome:
- The assistant records the login steps with semantic locators.
- It identifies missing assertions, such as expected URL and visible account text.
- It recommends safe handling for saved authentication state.
Using "playwright-cli". Mock failed image loading during a visual check.
Expected outcome:
- The assistant adds a route that blocks matching image requests.
- It reloads the page, captures evidence, and compares the fallback UI behavior.
- It removes the route after the scenario is complete.
Security Audit
Medium Riskv4 • 7/5/2026 Open versioned report
Most static findings are false positives from Markdown examples, placeholder URLs, and documented playwright-cli commands. Confirmed risks are limited to browser-session data operations and documented advanced capabilities such as run-code, tracing, and destructive session cleanup.
7
Files scanned
1,149
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (10)
Medium
Arbitrary Playwright Code Execution
The skill documents run-code as a way to execute arbitrary Playwright code. This is powerful and expected, but it can read page data, grant permissions, or alter browser state on sensitive sites.
The documentation explicitly describes run-code for arbitrary Playwright code and shows direct browser context operations. The risk depends on user intent, but the capability is clear.
Medium
Browser Session Data Access
The skill supports reading, writing, deleting, saving, and restoring cookies and browser storage. These operations can expose or modify authentication state if used on real accounts.
The cited lines show cookie commands, stored cookies and localStorage values, and security notes about auth tokens. This confirms the session data exposure risk.
Medium
Trace Artifacts Can Capture Sensitive Data
Tracing captures request headers, bodies, DOM snapshots, screenshots, and console messages. The example flow enters payment-like values, so traces can store sensitive test or user data.
The documentation states traces include request and response bodies and shows a checkout capture flow. That directly supports the sensitive artifact risk.
Low
System reconnaissance
playwright-cli cookie-get session_id
The command can read, set, or delete browser cookies such as session_id, which may represent authentication state. This is documented functionality, but it is a real session data risk.
Low
System reconnaissance
playwright-cli cookie-delete session_id
The command can read, set, or delete browser cookies such as session_id, which may represent authentication state. This is documented functionality, but it is a real session data risk.
Low
System reconnaissance
playwright-cli cookie-get session_id
The command can read, set, or delete browser cookies such as session_id, which may represent authentication state. This is documented functionality, but it is a real session data risk.
Low
System reconnaissance
playwright-cli cookie-set session_id abc123
The command can read, set, or delete browser cookies such as session_id, which may represent authentication state. This is documented functionality, but it is a real session data risk.
Low
System reconnaissance
playwright-cli cookie-set session_id abc123 --domain=example.com --httpOnly --secure
The command can read, set, or delete browser cookies such as session_id, which may represent authentication state. This is documented functionality, but it is a real session data risk.
Show all 10 confirmed findings
Low
System reconnaissance
playwright-cli cookie-delete session_id
The command can read, set, or delete browser cookies such as session_id, which may represent authentication state. This is documented functionality, but it is a real session data risk.
Low
Destructive Browser Session Controls
The skill documents commands that delete session data and forcefully kill browser processes. These commands are legitimate, but they can disrupt active work or remove useful state.
The cited commands explicitly delete user data, close browsers, and kill browser processes. The impact is operational disruption rather than malicious behavior.
Risk Factors
🌐 Network access (34)
references/request-mocking.md:61 references/request-mocking.md:46 references/request-mocking.md:3 references/running-code.md:51 references/running-code.md:213 references/running-code.md:226 references/storage-state.md:26 references/storage-state.md:49 references/storage-state.md:236 references/storage-state.md:247 references/storage-state.md:255 references/storage-state.md:265 references/test-generation.md:14 references/test-generation.md:43 references/test-generation.md:72 references/tracing.md:12 references/tracing.md:68 references/tracing.md:81 references/tracing.md:93 references/tracing.md:121 references/video-recording.md:12 SKILL.md:15 SKILL.md:33 SKILL.md:34 SKILL.md:98 SKILL.md:139 SKILL.md:187 SKILL.md:189 SKILL.md:222 SKILL.md:229 SKILL.md:242 SKILL.md:243 SKILL.md:253 SKILL.md:262
⚙️ External commands (39)
references/running-code.md:226-232 SKILL.md:11-24 SKILL.md:24-30 SKILL.md:30-54 SKILL.md:54-58 SKILL.md:58-62 SKILL.md:62-66 SKILL.md:66-71 SKILL.md:71-75 SKILL.md:75-82 SKILL.md:82-86 SKILL.md:86-91 SKILL.md:91-95 SKILL.md:95-102 SKILL.md:102-106 SKILL.md:106-133 SKILL.md:133-137 SKILL.md:137-143 SKILL.md:143-147 SKILL.md:147-156 SKILL.md:156-159 SKILL.md:159-180 SKILL.md:180-186 SKILL.md:186-193 SKILL.md:193-195 SKILL.md:195-197 SKILL.md:197 SKILL.md:201-215 SKILL.md:215-219 SKILL.md:219 SKILL.md:221-224 SKILL.md:224-228 SKILL.md:228-237 SKILL.md:237-241 SKILL.md:241-248 SKILL.md:248-252 SKILL.md:252-259 SKILL.md:259-261 SKILL.md:261-268
📁 Filesystem access (1)
Detected Patterns
System reconnaissance×6
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/microsoft-playwright-cli/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/microsoft-playwright-cli?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/microsoft-playwright-cli?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/microsoft-playwright-cli/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/microsoft-playwright-cli.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
microsoft. (2026). playwright-cli security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/microsoft-playwright-cli/audits/4BibTeX citation
@techreport{microsoft-microsoft-playwright-cli-2026,
author = {microsoft},
title = {playwright-cli security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/microsoft-playwright-cli/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "playwright-cli security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "microsoft"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/microsoft-playwright-cli/audits/4"
identifiers:
- type: other
value: "skillstore:microsoft-playwright-cli:audit:4"
description: "Skillstore immutable audit report identifier"
Compare variants
2 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Highest Skillstore Score
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
screenci Recommended
screenci-playwright-cli
Skillstore Score 69
Evidence Confidence Medium
Skillstore usage 4
Updated
2026-09-09
microsoft Current
microsoft-playwright-cli
Skillstore Score 50
Evidence Confidence High
Skillstore usage 20
Updated
2026-09-09
Skillstore Score
Why this score Evidence Confidence: High 45
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Create Regression Tests
Record a browser flow, collect generated Playwright actions, and turn them into repeatable tests with stable locators.
Debug Web Failures
Reproduce a failing interaction, inspect snapshots, review console and network output, and save traces for analysis.
Document Product Flows
Capture screenshots, videos, PDFs, and clear step records for demos, release notes, and workflow reviews.
Try These Prompts
Inspect a Page
Open <URL>, take a snapshot, list the main interactive elements, and suggest stable locators for a Playwright test.
Record a Form Flow
Use playwright-cli to open <URL>, fill the form with test data, capture generated actions, and suggest assertions to add.
Debug a Failed Click
Start tracing, reproduce the failed click on <URL>, stop tracing, and summarize likely causes from DOM, console, and network evidence.
Mock an API Scenario
Mock <API pattern> with one success response and one failure response, exercise the page, and outline a reusable Playwright test plan.
Best Practices
- Use authorized sites and test accounts when automating login, storage, or payment-like flows.
- Start with snapshots and semantic element references before clicking or filling fields.
- Delete or ignore generated traces, videos, snapshots, and storage state files when they are no longer needed.
Avoid
- Running run-code or eval from untrusted page text without review.
- Using real credentials, real session cookies, or production payment data in examples.
- Leaving persistent profiles, saved auth files, traces, or recordings in a shared repository.
Frequently Asked Questions
What does this skill automate?
It automates Playwright CLI browser sessions, including navigation, page interaction, screenshots, traces, videos, storage, and network mocking.
Does it generate complete Playwright tests?
It can capture useful Playwright actions, but users should add assertions, fixtures, cleanup, and review before committing tests.
Can it work with authenticated pages?
Yes, it can save and restore storage state, but auth files can contain secrets and should be protected or deleted.
Can it inspect network traffic?
Yes, it can list network activity, mock requests, and capture traces that include headers, bodies, timing, and failures.
What tools must be installed?
The environment needs playwright-cli available globally or through the documented npx fallback.
Is it safe for production sites?
Use it only with authorization and prefer test accounts. Traces, videos, and saved state can contain sensitive production data.
Developer Details
Author
microsoftLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
6425ec35f4ac137735cff58cd7877843bba23e3b
Maintenance freshness
7/18/2026
Usage
14 downloads · 123 views
File structure