📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills webapp-testing
📦
webapp-testing
Content revision r1 High Risk ⚙️ External commands🌐 Network access📁 Filesystem access
Test Local Web Apps with Playwright
Local web apps often need browser checks, screenshots, and log review during development. This skill provides Playwright workflows and a helper script for starting servers before automation runs.
Supports: Claude Codex Code(CC)
This skill is part of a pack
Install the whole pack to get every skill the task needs, in one command.
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "webapp-testing" from https://skillstore.io/skills/sickn33-webapp-testing.md and its manifest at https://skillstore.io/api/skills/sickn33-webapp-testing/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "webapp-testing". Check whether the local signup page renders correctly.
Expected outcome:
The report confirms the page loaded, lists the visible form fields, notes one missing label, and references a saved screenshot.
Using "webapp-testing". Debug why the dashboard button cannot be clicked.
Expected outcome:
The result explains that the button appears after delayed rendering, recommends waiting for the selector, and identifies a stable role selector.
Using "webapp-testing". Run a browser check while starting the frontend server.
Expected outcome:
The summary shows that the server reached the expected port, the browser flow completed, and cleanup stopped the server afterward.
Security Audit
High Riskv4 • 7/7/2026 Open versioned report
Most SKILL.md static hits are false positives caused by Markdown backticks and example code fences. The helper script does present real risk because it runs caller-provided commands, including a shell-based server command, and the documentation encourages black-box script execution before source review.
3
Files scanned
404
Lines analyzed
2
Review items
0
False positives ignored
Confirmed security concerns (1)
High
Prompt Injection Attempt Detected
SKILL.md says, "DO NOT read the source until you try running the script first" and later tells agents to use bundled scripts as black boxes. That guidance can suppress inspection of local command execution behavior before use.
The wording directly discourages source review before execution. This matters because the bundled helper later runs caller-provided shell commands.
Capability review items (2)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Python subprocess.run
result = subprocess.run(args.command)
subprocess.run executes the caller-provided command after the local servers are ready. This is intentional tooling, but it gives the skill a direct arbitrary local command execution capability.
High
Python subprocess.Popen
process = subprocess.Popen(
subprocess.Popen starts the user-provided --server string with shell=True. This creates command-injection risk if any part of the server command is derived from untrusted text.
Risk Factors
⚙️ External commands (23)
scripts/with_server.py:88 scripts/with_server.py:69 SKILL.md:12 SKILL.md:14 SKILL.md:18-33 SKILL.md:33-37 SKILL.md:37-40 SKILL.md:40-42 SKILL.md:42-45 SKILL.md:45-50 SKILL.md:50-53 SKILL.md:53-63 SKILL.md:63-68 SKILL.md:68-72 SKILL.md:72-80 SKILL.md:80-81 SKILL.md:81-85 SKILL.md:85 SKILL.md:86-88 SKILL.md:88 SKILL.md:89 SKILL.md:94-95 SKILL.md:95-96
🌐 Network access (1)
📁 Filesystem access (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-webapp-testing/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-webapp-testing?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-webapp-testing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-webapp-testing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-webapp-testing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). webapp-testing security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-webapp-testing/audits/4BibTeX citation
@techreport{sickn33-sickn33-webapp-testing-2026,
author = {sickn33},
title = {webapp-testing security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/sickn33-webapp-testing/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "webapp-testing security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-webapp-testing/audits/4"
identifiers:
- type: other
value: "skillstore:sickn33-webapp-testing:audit:4"
description: "Skillstore immutable audit report identifier"
Compare variants
11 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Highest Skillstore Score
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
AutumnsGrove Recommended
autumnsgrove-webapp-testing
Skillstore Score 85
Evidence Confidence High
Skillstore usage 64
Updated
2026-08-21
7spade-webapp-testing
Skillstore Score 79
Evidence Confidence High
Skillstore usage 19
Updated
2026-08-21
webapp-testing
Skillstore Score 50
Evidence Confidence High
Skillstore usage 85
Updated
2026-08-21
zhanlincui-webapp-testing
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 140
Updated
2026-08-21
artemisai-webapp-testing
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 49
Updated
2026-08-21
sickn33 Current
sickn33-webapp-testing
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 46
Updated
2026-08-21
azeem-2-webapp-testing
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 14
Updated
2026-08-21
cam10001110101-webapp-testing
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 10
Updated
2026-08-21
dyai2025-webapp-testing
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated
2026-08-21
davila7-webapp-testing
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated
2026-08-21
composiohq-webapp-testing
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated
2026-08-21
Skillstore Score
Why this score Evidence Confidence: Medium 45
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance
What You Can Build
Verify a Frontend Change
Run a local app, navigate key screens, and capture screenshots after a UI change.
Debug Dynamic Page Behavior
Wait for JavaScript rendering, inspect the DOM, and identify selectors for reliable actions.
Review Browser Console Output
Use Playwright examples to capture console messages while testing local user flows.
Try These Prompts
Open a Local Page
Use this skill to open my local web page with Playwright, wait for rendering, and describe what appears on the page.
Capture a Screenshot
Use Playwright to load the local app, wait for network idle, capture a full-page screenshot, and summarize visible issues.
Test a User Flow
Start the local server if needed, run a Playwright flow through the main user path, and report pass or fail results with screenshots.
Investigate a Dynamic Selector Issue
Inspect the rendered DOM after network idle, identify stable selectors, rerun the interaction, and explain any timing or selector problems.
Best Practices
- Review helper script behavior before running commands from a new repository.
- Wait for network idle or a specific selector before inspecting dynamic pages.
- Use stable roles, labels, and IDs instead of brittle visual selectors.
Avoid
- Running server commands copied from untrusted text without review.
- Inspecting the DOM before the application has finished rendering.
- Using fixed timeouts when a selector or load-state wait is available.
Frequently Asked Questions
Does this skill start local development servers?
Yes. It includes a helper script that can start one or more local servers before browser automation runs.
Does it work with static HTML files?
Yes. The guidance supports reading static HTML directly and using Playwright for local file testing.
Can it test dynamic JavaScript applications?
Yes. It recommends waiting for network idle before inspecting the DOM or interacting with rendered content.
Does it include browser screenshot support?
Yes. The examples show how to save screenshots during Playwright inspection workflows.
Does it make external network requests?
The documented example targets localhost. Users should review any server or page URL before execution.
What is the main security concern?
The helper can run local commands supplied by the caller, so commands should be reviewed before use.
Developer Details
Author
sickn33License
Complete terms in LICENSE.txt
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
f93e9bb0daca99badb6a7e574b97737155d57cb3
Maintenance freshness
7/18/2026
Usage
42 downloads · 223 views
File structure
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
📦
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
playwright-testing
86Build Reliable Playwright Tests
by C0ntr0lledCha0s
Playwright test suites can become flaky, slow, and difficult to maintain. This skill provides practical patterns for locators, fixtures, page objects, debugging, mocking, and configuration.
Coding & Development View
📦
playwright-best-practices
79Improve Playwright Test Reliability
by 0xBigBoss
Playwright tests often become flaky, slow, and noisy in agent workflows. This skill provides concise patterns for locators, assertions, fixtures, auth reuse, network mocks, and compact reporters.
Coding & Development View
📦
testing
85Build Reliable Test Automation
by 89jobrien
Weak tests slow releases and hide regressions. This skill guides test strategy, TDD, automation, coverage review, and Playwright web checks.
Coding & Development View
📦
firecrawl-build-interact
82Build Firecrawl Browser Interactions
by firecrawl
Dynamic pages often hide data behind clicks, forms, and login flows. This skill helps teams choose and scope Firecrawl /interact integrations.
Coding & Development View
📦
senior-qa
81Improve QA Coverage for Web Apps
by alirezarezvani
Modern teams need clear test strategy and practical automation without slowing delivery. This skill helps Claude, Codex, and Claude Code plan tests, review coverage, and scaffold QA workflows.
Coding & Development View
📦
vue-testing-best-practices
80Improve Vue Testing Practices
by vuejs-ai
Vue teams often struggle with brittle component tests, async rendering, and E2E setup choices. This skill gives practical Vue testing patterns for Vitest, Vue Test Utils, Pinia, Teleport, Suspense, and Playwright.
Coding & Development View