Playwright Browser Automation
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill explicitly navigates to and scrapes arbitrary web pages (e.g., multiple examples using page.goto(TARGET_URL) and the "Check for Broken Links" routine that requests external hrefs) and asks for or auto-detects URLs (SKILL.md and the example scripts), so it will fetch and interpret untrusted public web content provided by users or the open web.
Audit Metadata