playwright-automation
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's examples and SKILL.md explicitly navigate to and scrape public websites (e.g., examples/search_example.py uses page.goto('https://www.tianyancha.com/...') and the SKILL.md / scraper_free.py show page.goto(url) and page.text_content()/query_selector_all(), so it fetches untrusted third‑party content and interprets it as part of its workflow which can influence subsequent actions.
Audit Metadata