playwright

Warn

Audited by Runlayer on Feb 22, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
80%
Files
7
Flagged
7
Chunks
8
Flagged Files (7)
SKILL.mdHIGH
80.0%

Malicious tool definition detected

A global install of `playwright-cli` is optional. ## Skill path (set once) ```bash export CODEX_HOME="${CODEX_HOME:-$HOME/.codex}" export PWCLI="$CODEX_HOME/skills/playwright/scripts/playwright_cli.sh" ``` User-scoped skills install under `$CODEX_HOME/skills` (default: `~/.codex/skills`).

references/workflows.mdHIGH
79.3%

Malicious tool definition detected

pwcli tracing-start # reproduce the issue pwcli tracing-stop pwcli screenshot ``` ## Sessions Use sessions to isolate work across projects: ```bash pwcli --session marketing open https://example.com pwcli --session marketing snapshot pwcli --session checkout open https://example.com/checkout ``` Or set the session once: ```bash export PLAYWRIGHT_CLI_SESSION=checkout pwcli open https://example.com/checkout ``` ## Configuration file By default, the CLI reads `playwright-cli.json` from the current

NOTICE.txtHIGH
78.2%

Malicious tool definition detected

See LICENSE.txt in this directory.

scripts/playwright_cli.shMEDIUM
57.5%

Tool passed security scan

references/cli.mdMEDIUM
51.4%

Tool passed security scan

LICENSE.txtLOW
39.4%

Tool passed security scan

agents/openai.yamlLOW
35.5%

Tool passed security scan

Audit Metadata
Max File Score
80%
Classification
UNKNOWN_SERVER
Files Scanned
7
Files Flagged
7
Chunks Analyzed
8
Analyzed
Feb 22, 2026, 04:56 AM
Security Audit — runlayer — playwright