cutscene@0.2.9
VERIFIED· install onlyPublisher claims: "Record real web app flows as pixel-exact product videos, scripted like Playwright tests. Comes with an agent skill." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry npm (MCP server)Publisher pavlonekrasov · publishing for 6 daysInstalls 791Last detonated 4d ago
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-10 and scored it 87/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
MEDIUM
npx invocation of non-well-known packageskills/cutscene/SKILL.md:18 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @pavlonekrasov/cutscene init # or: init <dir>, default demo/Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/cutscene.mjs:3 · npx invocation of non-well-known package — may execute untrusted code
AST06// machine. Plain Node, no dependencies, so `npx @pavlonekrasov/cutscene …` runs anywhere.Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/cutscene.mjs:109 · npx invocation of non-well-known package — may execute untrusted code
AST06"! Couldn't install Chromium. Run `npx playwright install chromium`, or set `browser` in the config.",Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageAGENTS.md:4 · npx invocation of non-well-known package — may execute untrusted code
AST06(or `npx @pavlonekrasov/cutscene skill` to install it). This file is for changing cutscene itself.Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageAGENTS.md:33 · npx invocation of non-well-known package — may execute untrusted code
AST06fresh project in a temp folder, run `npx @pavlonekrasov/cutscene init` there and record its firstFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/cutscene.mjs:138 · npx invocation of non-well-known package — may execute untrusted code
AST06if (!name) say(`· Kept your "demo" and "cutscene" scripts; run it with npx ${script}`);Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageskills/cutscene/SKILL.md:19 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @pavlonekrasov/cutscene doctor # Node 20+, @playwright/test, a Chromium, ffmpegFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageskills/cutscene/SKILL.md:127 · npx invocation of non-well-known package — may execute untrusted code
AST06| Browser won't launch | `npx playwright install chromium`, or set `browser` to an installed Chromium. |Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageAGENTS.md:14 · npx invocation of non-well-known package — may execute untrusted code
AST06| `skills/cutscene/` | The agent skill, shipped in the package; `npx … skill` installs it. |Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/cutscene.mjs:41 · npx invocation of non-well-known package — may execute untrusted code
AST06// npm, npx and friends are .cmd files on Windows, which only start through a shell; there theFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/cutscene.mjs:39 · npx invocation of non-well-known package — may execute untrusted code
AST06/** Runs a command in the project, output shown; Windows needs a shell for npm/npx (.cmd). */Fix: Pin versions and sources; vendor anything fetched at install time.LOW
Instructs the agent to modify its persistent memory or instruction filespackage.json:48 · Instructs the agent to modify its persistent memory or instruction files · informational: not an instruction file
AST01"format": "prettier --write src examples templates bin skills README.md GUIDE.md AGENTS.md",Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
npx invocation of non-well-known packagedist/config.d.ts:29 · npx invocation of non-well-known package — may execute untrusted code
AST06* Which Chromium browser records. Default: Playwright's own Chromium (`npx playwright installFix: Pin versions and sources; vendor anything fetched at install time.Cost to the agent
Instructions loaded
≈2,728 tok
2 files · 32 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
No advisories in OSV for @pavlonekrasov/cutscene@0.2.9 as of 4d ago. This is the package itself, not its dependencies.