playwright-automation

Warn

Audited by Snyk on Mar 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's examples and SKILL.md explicitly navigate to and scrape public websites (e.g., examples/search_example.py uses page.goto('https://www.tianyancha.com/...') and the SKILL.md / scraper_free.py show page.goto(url) and page.text_content()/query_selector_all(), so it fetches untrusted third‑party content and interprets it as part of its workflow which can influence subsequent actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 5, 2026, 07:56 AM