Skills playwright-best-practices

📦

playwright-best-practices

Name: playwright-best-practices
Author: vitalics

v1.0.0 Content revision r1 High Risk ⚙️ External commands🌐 Network access📁 Filesystem access🔑 Env variables

Review Playwright TypeScript Tests

Flaky Playwright tests slow releases and reduce trust in automation. This skill reviews tests against focused TypeScript best practices and suggests concrete fixes.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "playwright-best-practices" from https://skillstore.io/skills/vitalics-playwright-best-practices.md and its manifest at https://skillstore.io/api/skills/vitalics-playwright-best-practices/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/vitalics-playwright-best-practices.md Signed manifest GET /api/skills/vitalics-playwright-best-practices/manifest Signed lockfile GET /api/skills/vitalics-playwright-best-practices/lockfile

Test it

Using "playwright-best-practices". Review tests/login.spec.ts for flaky patterns.

Expected outcome:

tests/login.spec.ts:18 uses a fixed delay. Replace it with an action or assertion that auto-waits.
tests/login.spec.ts:31 checks text after reading it once. Use a web-first text assertion instead.

Using "playwright-best-practices". Check tests/cart.spec.ts for locator quality.

Expected outcome:

tests/cart.spec.ts:12 uses a structural selector. Prefer a role locator with the visible button name.
tests/cart.spec.ts:44 depends on item order. Scope the locator to the cart row before clicking.

Using "playwright-best-practices". Audit tests/fixtures for parallel readiness.

Expected outcome:

tests/fixtures/users.ts:9 creates shared state across workers. Generate isolated users for each test.
tests/fixtures/users.ts:26 lacks teardown. Delete created records after each test fixture completes.

Security Audit

High Risk

v7 • 7/7/2026 Open versioned report

Most static findings are false positives from Markdown examples, including example URLs, template literals, relative imports, CI flags, and Playwright API mocks. One real issue remains: SKILL.md requires fetching mutable remote guidelines and treating them as instructions, which can change outside the audited package.

Files scanned

7,900

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

High

SKILL.md:16-29

Mutable Remote Instructions Fetched at Runtime

SKILL.md tells the agent to fetch fresh guidelines before each review and then use the fetched content as rules. Because the URL follows a mutable branch, the reviewed package can later execute changed instructions outside this audit.

The file explicitly requires WebFetch of latest rules from a branch and says the fetched content contains output instructions. This is a clear supply-chain and prompt-injection surface even though no malicious remote content is present locally.

Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

SKILL.md:26

Hardcoded URL

https://raw.githubusercontent.com/vitalics/playwright-labs/tree/main/packages/playwright-best-practi

SKILL.md instructs the agent to fetch live guidelines from a mutable GitHub branch before each review. That network dependency can introduce unreviewed instructions after marketplace audit.

Risk Factors

⚙️ External commands (58)

🌐 Network access (181)

📁 Filesystem access (28)

🔑 Env variables (32)

AGENTS.md:1475 AGENTS.md:1624 AGENTS.md:1762 AGENTS.md:1873 AGENTS.md:1876 AGENTS.md:1879 AGENTS.md:2305 AGENTS.md:2310 AGENTS.md:1475 AGENTS.md:1624 AGENTS.md:1762 AGENTS.md:1873 AGENTS.md:1876 AGENTS.md:1879 AGENTS.md:2305 AGENTS.md:2310 rules/fixture-custom-merge-reuse.md:377 rules/fixture-custom-merge-reuse.md:382 rules/fixture-custom-merge-reuse.md:377 rules/fixture-custom-merge-reuse.md:382 rules/parallel-test-isolation.md:194 rules/parallel-test-isolation.md:194 rules/parallel-test-sharding.md:100 rules/parallel-test-sharding.md:238 rules/parallel-test-sharding.md:349 rules/parallel-test-sharding.md:352 rules/parallel-test-sharding.md:355 rules/parallel-test-sharding.md:100 rules/parallel-test-sharding.md:238 rules/parallel-test-sharding.md:349 rules/parallel-test-sharding.md:352 rules/parallel-test-sharding.md:355

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/vitalics-playwright-best-practices/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/vitalics-playwright-best-practices/security.svg)](https://skillstore.io/skills/vitalics-playwright-best-practices?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/vitalics-playwright-best-practices?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/vitalics-playwright-best-practices/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/vitalics-playwright-best-practices.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

vitalics. (2026). playwright-best-practices security audit report (audit version 7) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/vitalics-playwright-best-practices/audits/7

BibTeX citation

@techreport{vitalics-vitalics-playwright-best-practices-2026,
  author = {vitalics},
  title = {playwright-best-practices security audit report (audit version 7)},
  institution = {Skillstore},
  year = {2026},
  number = {7},
  url = {https://skillstore.io/skills/vitalics-playwright-best-practices/audits/7},
  note = {Author version 1.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "playwright-best-practices security audit report (audit version 7)"
version: "1.0.0"
type: report
authors:
  - name: "vitalics"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/vitalics-playwright-best-practices/audits/7"
identifiers:
  - type: other
    value: "skillstore:vitalics-playwright-best-practices:audit:7"
    description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

0xBigBoss Recommended

0xbigboss-playwright-best-practices

Skillstore Score 79

Evidence Confidence High

Skillstore usage 49

Updated

2026-08-21

vitalics Current

vitalics-playwright-best-practices

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 14

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Stabilize Flaky Test Suites

Find manual waits, race-prone assertions, and shared test state before they fail in continuous integration.

Review Pull Requests

Check new Playwright tests for readable locators, clear assertions, and maintainable page object usage.

Standardize Automation Patterns

Apply consistent fixture, sharding, isolation, and API mocking practices across a larger test suite.

Try These Prompts

Basic Test Review

Review my Playwright test file for best practice issues: <file path>.

Locator And Assertion Check

Check <file path> for brittle locators, weak assertions, and missing web-first assertions.

Fixture Refactor Review

Review the Playwright fixtures in <folder> and suggest changes for isolation, reuse, and cleanup.

Suite Architecture Audit

Audit <test folder> for page objects, parallel execution, sharding readiness, API mocking, and long-term maintainability.

Best Practices

Provide the exact test files or folders that need review.
Ask for findings with file and line references for easier triage.
Apply recommendations with small changes, then rerun the affected tests.

Avoid

Requesting a broad review without sharing test files or paths.
Using the skill as a substitute for running Playwright tests.
Ignoring accessibility names when adopting role-based locator advice.

Frequently Asked Questions

What test framework does this skill target?

It targets Playwright tests written in TypeScript.

Can it rewrite my tests automatically?

It can suggest changes, but edits depend on the agent and user request.

Does it execute Playwright tests?

No. It reviews source files and guidance, but it does not run browsers by itself.

What issues can it find?

It can find manual waits, brittle locators, weak assertions, poor fixture design, and parallel execution risks.

Does it support JavaScript tests?

Some advice may apply, but the documented examples and type guidance focus on TypeScript.

Is remote guideline fetching required?

The current skill requests it. For safer publishing, the author should bundle or pin the reviewed guidelines.

Developer Details

Author

vitalics

License

MIT

Author version

v1.0.0

Skillstore revision

Repository

https://github.com/vitalics/playwright-labs/tree/main/packages/playwright-best-practices/

Ref

36e07d5e13068e5be64447e8f20b427cf2cbd21a

Maintenance freshness

7/18/2026

Usage

12 downloads · 205 views

File structure

📁 rules/

📄 _sections.md

📄 _template.md

📄 advanced-api-mocking.md

📄 assertion-web-first.md

📄 debug-test-steps.md

📄 fixture-custom-merge-reuse.md

📄 fixture-describe-blocks.md

📄 locator-role-based.md

📄 parallel-test-isolation.md

📄 parallel-test-sharding.md

📄 speed-page-object-model.md

📄 stable-auto-waiting.md

📄 AGENTS.md

📄 README.md

📄 SKILL.md