技能 playwright-skill

📦

playwright-skill

Name: playwright-skill
Author: sickn33

内容修订 r1 严重 ⚙️ 外部命令🌐 网络访问📁 文件系统访问🔑 环境变量⚡ 包含脚本

使用 Playwright 自动化浏览器测试

手动浏览器检查速度慢且容易遗漏。此技能会为页面、表单、截图和响应式检查创建有针对性的 Playwright 自动化。

支持: Claude Codex Code(CC)

⚠️ 38 差

请勿自动安装此 Skill。

权威策略要求在执行任何安装操作前由操作人员审查。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "playwright-skill" from https://skillstore.io/skills/sickn33-playwright-skill.md and its manifest at https://skillstore.io/api/skills/sickn33-playwright-skill/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/sickn33-playwright-skill.md 已签名 manifest GET /api/skills/sickn33-playwright-skill/manifest 已签名 lockfile GET /api/skills/sickn33-playwright-skill/lockfile

测试它

正在使用“playwright-skill”。直观检查我的 localhost 应用。

预期结果:

在端口 3001 上发现一个本地服务器。
已在可见的 Chromium 窗口中加载主页。
已保存桌面端和移动端截图，并记录了两个布局问题。

正在使用“playwright-skill”。测试登录是否会重定向到仪表板。

预期结果:

登录表单已成功提交并重定向到仪表板。脚本未报告可见错误消息。

正在使用“playwright-skill”。查找损坏的外部链接。

预期结果:

已从页面收集外部链接。
已报告正常和失败的链接及其状态码。
已标记检查期间超时的链接。

安全审计

严重

v4 • 2026/7/7 打开版本化报告

Most documentation backtick and example URL detections are false positives. Material risks remain in run.js, which executes generated JavaScript with Node privileges and can install dependencies automatically. Header injection and sandbox-disabled browser launch also need remediation before marketplace auto-install.

已扫描文件

1,806

分析行数

复核项

已忽略误报

已确认安全问题 (7)

严重

SKILL.md:17-24 SKILL.md:41-42 run.js:52-71 run.js:121-147 run.js:205-209

Arbitrary Node.js Execution by Design

The skill tells the agent to write custom Playwright code and run it with run.js. run.js accepts file, inline, or stdin input, writes it to JavaScript, and loads it with require().

The documentation instructs generated script execution, and run.js implements file, inline, and stdin execution through require(). This directly grants generated code local Node.js privileges.

高

lib/helpers.js:16

Environment file access

const headerValue = process.env.PW_HEADER_VALUE;

This line reads PW_HEADER_VALUE, which can hold credentials or tokens. The value is later propagated into HTTP headers, so the sensitive-data risk is real.

高

lib/helpers.js:22

Environment file access

const headersJson = process.env.PW_EXTRA_HEADERS;

This line reads PW_EXTRA_HEADERS, which can include credential-bearing headers. The helper later applies those headers to browser contexts.

高

lib/helpers.js:366

Certificate/key files

...(Object.keys(mergedHeaders).length > 0 && { extraHTTPHeaders: mergedHeaders })

The spread merges environment-derived values into extraHTTPHeaders. This can propagate tokens to visited pages even though no certificate file is accessed.

高

lib/helpers.js:47

UID/GID manipulation

args: ['--no-sandbox', '--disable-setuid-sandbox']

Chromium is launched with --no-sandbox and --disable-setuid-sandbox by default. Disabling the browser sandbox increases impact from malicious or compromised pages.

高

SKILL.md:331-350 lib/helpers.js:14-27 lib/helpers.js:350-366

Unscoped Environment Header Propagation

The skill documents authentication tokens in custom headers and helper code applies environment-derived headers to browser contexts. A token for one target could be sent to another site.

The prose explicitly suggests authentication tokens, and the helper merges those environment values into extraHTTPHeaders. The code does not scope headers to a single origin.

低

lib/helpers.js:392

System reconnaissance

hostname: 'localhost',

The helper probes localhost ports to discover running services. The behavior is limited to common dev ports, but it is still local service reconnaissance.

能力复核项 (20)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

严重

run.js:209

Dynamic require with variable

require(tempFile);

run.js writes user or model supplied JavaScript to a temp file and loads it with require(). That executes arbitrary local Node.js code.

高

run.js:15

Node.js child_process module

const { execSync } = require('child_process');

run.js imports child_process and uses execSync during dependency setup. This is real process execution from the skill runtime.

高

run.js:38

Synchronous process execution

execSync('npm install', { stdio: 'inherit', cwd: __dirname });

run.js automatically runs npm install when Playwright is missing. That executes an external package-manager command from the skill runtime.

高

run.js:39

Synchronous process execution

execSync('npx playwright install chromium', { stdio: 'inherit', cwd: __dirname });

run.js automatically runs npx playwright install chromium when Playwright is missing. That executes an external command and can fetch browser dependencies.

中

lib/helpers.js:15

Environment variable access (dot notation)

const headerName = process.env.PW_HEADER_NAME;

The helper reads environment variables for custom HTTP header configuration. Those headers can influence requests made by browser contexts.

中

lib/helpers.js:16

Environment variable access (dot notation)

const headerValue = process.env.PW_HEADER_VALUE;

PW_HEADER_VALUE can contain authentication material and is later used as an HTTP header value. That makes this real secret-bearing environment access.

中

lib/helpers.js:22

Environment variable access (dot notation)

const headersJson = process.env.PW_EXTRA_HEADERS;

PW_EXTRA_HEADERS can contain multiple header values and is parsed from the environment. Those values are later applied to browser requests.

中

lib/helpers.js:15

Environment variable object

const headerName = process.env.PW_HEADER_NAME;

The helper reads environment variables for custom HTTP header configuration. Those headers can influence requests made by browser contexts.

中

lib/helpers.js:16

Environment variable object

const headerValue = process.env.PW_HEADER_VALUE;

PW_HEADER_VALUE can contain authentication material and is later used as an HTTP header value. That makes this real secret-bearing environment access.

中

lib/helpers.js:22

Environment variable object

const headersJson = process.env.PW_EXTRA_HEADERS;

PW_EXTRA_HEADERS can contain multiple header values and is parsed from the environment. Those values are later applied to browser requests.

中

run.js:59

Node.js fs operations

return fs.readFileSync(filePath, 'utf8');

run.js reads a caller-provided file path as JavaScript for later execution. That is real filesystem access tied to the arbitrary-code executor.

中

run.js:71

Node.js fs operations

return fs.readFileSync(0, 'utf8');

run.js reads JavaScript from standard input for later execution. That is real filesystem-style input access tied to the arbitrary-code executor.

中

run.js:205

Node.js fs operations

fs.writeFileSync(tempFile, code, 'utf8');

run.js writes generated JavaScript to a temp file inside the skill directory before executing it. This is real local file creation of executable code.

中

run.js:59

Synchronous file operations

return fs.readFileSync(filePath, 'utf8');

run.js synchronously reads a caller-provided script before execution. The synchronous API is secondary, but the filesystem access is real.

中

run.js:71

Synchronous file operations

return fs.readFileSync(0, 'utf8');

run.js synchronously reads code from standard input before execution. The read feeds the arbitrary-code execution path.

中

run.js:205

Synchronous file operations

fs.writeFileSync(tempFile, code, 'utf8');

run.js synchronously writes generated code to a JavaScript file that it then executes. This confirms filesystem write risk.

低

lib/helpers.js:391

HTTP/HTTPS request

const req = http.request({

detectDevServers sends HEAD requests to localhost on common development ports. This is intentional local probing, but it is real network behavior.

低

lib/helpers.js:391

HTTP client library

const req = http.request({

detectDevServers uses Node http.request to probe local ports. The target is localhost only, so the confirmed risk is limited.

低

lib/helpers.js:399

Hardcoded URL

detectedServers.push(`http://localhost:${port}`);

The helper constructs localhost URLs for detected services. This is not external exfiltration, but it is real local network discovery output.

低

run.js:56

Node.js fs stat operations

if (args.length > 0 && fs.existsSync(args[0])) {

run.js accepts a caller-provided file path and checks whether it exists before execution. This is a real filesystem touch, though the risk is limited.

风险因素

⚙️ 外部命令 (90)

API_REFERENCE.md:502-503 API_REFERENCE.md:530-538 API_REFERENCE.md:602-603 lib/helpers.js:54 lib/helpers.js:134 lib/helpers.js:137 lib/helpers.js:187 lib/helpers.js:195 lib/helpers.js:271 lib/helpers.js:334 lib/helpers.js:399 lib/helpers.js:400 run.js:15 run.js:38 run.js:39 run.js:58 run.js:121-156 run.js:161-173 run.js:201 SKILL.md:7 SKILL.md:11 SKILL.md:12 SKILL.md:13 SKILL.md:23-25 SKILL.md:25-31 SKILL.md:31-33 SKILL.md:33-41 SKILL.md:41-42 SKILL.md:42-48 SKILL.md:48-51 SKILL.md:51-59 SKILL.md:59-61 SKILL.md:61-65 SKILL.md:65-84 SKILL.md:84-88 SKILL.md:88-90 SKILL.md:90-96 SKILL.md:96-118 SKILL.md:118-122 SKILL.md:122-132 SKILL.md:132-144 SKILL.md:144-148 SKILL.md:148-158 SKILL.md:158-171 SKILL.md:171-175 SKILL.md:175-201 SKILL.md:201-202 SKILL.md:202-206 SKILL.md:206-210 SKILL.md:210-235 SKILL.md:235-239 SKILL.md:239-257 SKILL.md:257-269 SKILL.md:269-277 SKILL.md:277-283 SKILL.md:283-293 SKILL.md:293-302 SKILL.md:302-304 SKILL.md:304-325 SKILL.md:325-327 SKILL.md:327-341 SKILL.md:341-344 SKILL.md:344-348 SKILL.md:348-351 SKILL.md:351-355 SKILL.md:355-357 SKILL.md:357-361 SKILL.md:361-363 SKILL.md:363-365 SKILL.md:365-369 SKILL.md:369-386 SKILL.md:386-387 SKILL.md:387 SKILL.md:388-389 SKILL.md:389-390 SKILL.md:390-391 SKILL.md:391-392 SKILL.md:392-393 SKILL.md:393 SKILL.md:395-401 SKILL.md:401-403 SKILL.md:403-406 SKILL.md:406-409 SKILL.md:409-412 SKILL.md:412-416 SKILL.md:416-427 SKILL.md:427-429 SKILL.md:429-444 SKILL.md:444-451 SKILL.md:451-452

🌐 网络访问 (21)

📁 文件系统访问 (43)

🔑 环境变量 (18)

API_REFERENCE.md:53 API_REFERENCE.md:54 API_REFERENCE.md:55 API_REFERENCE.md:72 API_REFERENCE.md:53 API_REFERENCE.md:54 API_REFERENCE.md:55 API_REFERENCE.md:72 lib/helpers.js:15 lib/helpers.js:16 lib/helpers.js:22 lib/helpers.js:45 lib/helpers.js:46 lib/helpers.js:15 lib/helpers.js:16 lib/helpers.js:22 lib/helpers.js:45 lib/helpers.js:46

⚡ 包含脚本 (3)

lib/helpers.js:174 run.js:110 run.js:209

检测到的模式

UID/GID manipulationSystem reconnaissance

审计者: codex 查看审计历史 →

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/sickn33-playwright-skill/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-playwright-skill/security.svg)](https://skillstore.io/skills/sickn33-playwright-skill?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/sickn33-playwright-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-playwright-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/sickn33-playwright-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

sickn33. (2026). playwright-skill security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-playwright-skill/audits/4

BibTeX 引用

@techreport{sickn33-sickn33-playwright-skill-2026,
  author = {sickn33},
  title = {playwright-skill security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/sickn33-playwright-skill/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "playwright-skill security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "sickn33"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-playwright-skill/audits/4"
identifiers:
  - type: other
    value: "skillstore:sickn33-playwright-skill:audit:4"
    description: "Skillstore immutable audit report identifier"

比较变体

2 个可安装变体

每位作者的技能都保持为独立的可安装项。推荐变体按 Skillstore 证据排序。

为什么此变体排名第一

Skillstore 使用量更高

作者 / 来源 Skillstore 评分证据置信度 Skillstore 使用量已更新

sickn33 推荐当前

sickn33-playwright-skill

Skillstore 评分 38

证据置信度中

Skillstore 使用量 28

已更新

2026-09-09

lackeyjb

lackeyjb-playwright-skill

Skillstore 评分 38

证据置信度中

Skillstore 使用量 18

已更新

2026-09-09

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

检查本地 Web 应用

检测正在运行的开发服务器，打开应用，捕获截图，并报告可见的布局问题。

验证用户工作流

使用有针对性的 Playwright 自动化执行登录、表单提交、导航和重定向流程。

检查响应式行为

比较桌面、平板和移动端视图，并根据保存的截图总结可见回归问题。

试试这些提示

测试本地页面

查找我正在运行的开发服务器，并在可见浏览器中测试主页。捕获截图并报告可见的布局问题。

验证表单流程

使用 Playwright 填写联系表单、提交表单，并报告验证消息和成功状态。使用真实凭据前先询问。

比较响应式视图

在桌面、平板和移动端宽度下运行响应式检查。保存截图，并用文件路径总结布局回归问题。

构建有针对性的脚本

为 [workflow] 针对 [URL] 创建一个 Playwright 脚本。保持 URL 可配置，并在运行前说明外部请求。

最佳实践

当涉及凭据、上传或外部域名时，请在执行前审查生成的脚本。
除非用户明确批准生产测试，否则使用 localhost 或暂存目标。
保持 URL 和密钥可配置，并限定在被测试的来源范围内。

避免

未经用户批准，不要对未知外部站点运行生成的自动化。
不要将长期有效的凭据放入范围宽泛的 PW_EXTRA_HEADERS 值中。
不要把视觉截图当作业务逻辑正确性的证明。

常见问题

此技能是否需要安装 Playwright？

是。setup 命令会在缺失时安装 Playwright 和浏览器二进制文件。

它能测试本地开发服务器吗？

可以。它会探测常见的 localhost 端口，并在发现多个服务器时询问。

它能测试外部网站吗？

可以，但请先提供 URL，并批准任何敏感凭据或生产操作。

生成的脚本存储在哪里？

说明会将生成的 Playwright 脚本和截图导向 /tmp 下的临时路径。

它会在可见浏览器中运行吗？

是。除非请求 headless 模式，否则该技能默认要求使用可见浏览器运行。

这对密钥安全吗？

请谨慎使用。标头变量可能会把凭据值发送到浏览器访问的页面。

开发者详情

作者

sickn33

许可证

MIT

Skillstore 修订

版本提示

作者未声明版本。

仓库

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/playwright-skill

引用

816c62b2546ddb1c6a0453e7c781b5e095117819

维护新鲜度

2026/7/18

使用量

24 次下载 · 160 次浏览

文件结构

📁 lib/

📄 helpers.js

📄 API_REFERENCE.md

📄 package.json

📄 run.js

📄 SKILL.md