Playwright Browser Automation

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:20 PM UTC
• Version:
  1.1.0

Overview

This is a straightforward Playwright browser automation tutorial, but users should avoid using its anti-bot workaround on sites where they do not have permission.

Install in a virtual environment if possible. Use the skill only on sites and accounts you are authorized to automate, require confirmation before submitting forms or capturing sensitive pages, and do not use the anti-bot example to bypass site rules or access controls.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Context-Inappropriate Capability

Medium

• Confidence: 95% confidence
• Finding: The skill explicitly advises users to hide browser automation traits and spoof a User-Agent to get around anti-bot protections. That goes beyond normal Playwright usage and facilitates evasion of website defenses, which can enable scraping or automated abuse against targets that are attempting to block such activity.

VirusTotal

65/65 vendors flagged this skill as clean.