Playwright Network HAR Recorder

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated capability is plausible and aligned with Playwright testing, but the distribution path is not coherent with the claimed Microsoft source: installation runs an unpinned third-party skills CLI and pulls from `agentskillexchange/skills`, creating a transitive trust chain. No direct credential theft or malicious data exfiltration is shown, so this is not confirmed malware, but the install/provenance mismatch makes it medium risk.

Confidence: 86%Severity: 62%
Audit Metadata
Analyzed At
Mar 29, 2026, 03:37 AM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fplaywright-network-har-recorder%2F@c9778c020b0f29d59a3c38a7a18e177866e8cb29