playwright-cli
Fail
Audited by Snyk on Feb 19, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt contains examples and commands that embed secrets and credentials verbatim (e.g., cookie-set session_id abc123, fill e2 "password123"), so an agent following it would need to include secret values directly in generated commands or outputs.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly opens and navigates arbitrary external URLs (playwright-cli open/goto in SKILL.md) and its run-code examples (references/running-code.md) show returning page.content and scraping multiple pages, so untrusted public web content is fetched and used to drive actions and decisions, enabling indirect prompt injection.
Audit Metadata