playwright-local

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS. The main Playwright functionality is coherent and mostly uses official sources, so this is not malware-like. However, the skill meaningfully increases risk by enabling anti-bot bypass, arbitrary-site automation, session capture, and untrusted web-content processing with local execution/write access; the inconsistent MCP install guidance and third-party stealth dependencies add medium supply-chain concern.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Mar 18, 2026, 04:48 PM
Package URL
pkg:socket/skills-sh/jezweb%2Fclaude-skills%2Fplaywright-local%2F@660a695717a979ffdfcbd8465ec8bf79349b703f