Playwright (scripts) + npx
PassAudited by ClawScan on May 10, 2026.
Overview
This is a coherent Playwright browser-automation helper, but users should review scripts before running them and protect any saved browser session files.
Install only in a trusted project, review any Playwright script before running it, and be especially careful when automating logged-in sites. If you use the session example, treat tmp/session.json like a credential and delete it when finished.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A script can click buttons, fill fields, scrape pages, or submit forms on sites the browser can access.
The skill intentionally grants broad browser automation capability, including actions that could submit forms or interact with websites.
Use for web scraping, screenshots, form automation, and any browser task requiring programmatic control.
Review scripts before running them, especially on logged-in sites or when a script will submit forms, upload files, purchase items, or change account settings.
If the saved session file is exposed, copied, or committed, someone or another script may be able to reuse the logged-in browser session.
The example saves and reloads browser authentication/session state, which can allow future browser runs to act as the logged-in user.
const SESSION_FILE = 'tmp/session.json'; ... context = await browser.newContext({ storageState: SESSION_FILE }); ... await context.storageState({ path: SESSION_FILE });Keep session files private, do not commit them, delete them when no longer needed, and consider using a dedicated test account for automation.
The installed package and browser binaries become part of the local execution environment.
The setup instructs the user to install Playwright and browser binaries from external package/tooling sources; this is expected for Playwright but depends on package provenance and version resolution.
npm install playwright npx playwright install chromium
Install in a project or sandbox you trust, use a lockfile or pinned version for repeatability, and follow normal npm supply-chain hygiene.