Skills/skills.sh/playwright-cli

playwright-cli@r1

CAUTION

Publisher claims: "Automate browser interactions, test web pages and work with Playwright tests." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher microsoft · joined 2 days agoInstalls 194KLast detonated 35 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Process kill commandSKILL.md:394 · Process kill command — agent can terminate processes
AST05
HIGH
npx invocation of non-well-known packageSKILL.md:408 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageSKILL.md:402 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
document.cookie accessreferences/storage-state.md:256 · document.cookie access — can steal session cookies
AST07
HIGH
npx invocation of non-well-known packagereferences/pr-attachments.md:46 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagereferences/playwright-tests.md:7 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageSKILL.md:4 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagereferences/playwright-tests.md:3 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageSKILL.md:405 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commandreferences/session-management.md:44 · Process kill command — agent can terminate processes
AST05
HIGH
npx invocation of non-well-known packagereferences/playwright-tests.md:23 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagereferences/test-generation.md:153 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagereferences/test-generation.md:10 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagereferences/test-generation.md:296 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagereferences/test-generation.md:208 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagereferences/test-generation.md:359 · npx invocation of non-well-known package — may execute untrusted code
AST06
LOW
Unpinned dependencySKILL.md:411 · Unpinned dependency
AST06