Manikantasai Playwright Automation

• Analyzed: May 12, 2026, 3:40 AM
• Findings: 1
• Version: 1.0.0
• Hash: 7cc738b283e28c54c669072ea9d8455af75e91db8fa1436d25d216068faab4ab
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious due to the broad capabilities it enables and specific configuration instructions. The `SKILL.md` provides instructions for modifying `/etc/sudoers.d/playwright` to allow `NOPASSWD` execution of `npx playwright install-deps` and `npx playwright install` commands, which is a privilege escalation for specific tasks. Additionally, the skill's core functionality, demonstrated in `SKILL.md` and `examples.py`, includes `browser_evaluate` which allows arbitrary JavaScript execution within the browser context, and capabilities like file upload/download and network interception, which are powerful and could be misused if the agent is compromised or given malicious instructions, even though the provided examples themselves are benign.