Playwright Skill

• Analyzed: May 12, 2026, 4:34 AM
• Findings: 1
• Version: 0.1.0
• Hash: 2fb38cfaa76bc25ded801cb3560387a411443c49fc989747b6e100b5f4bc0adc
• Source: palm
• External report: View on VirusTotal

Findings (1)

The `SKILL.md` file instructs the AI agent to use an 'inline execution' pattern (`cd $SKILL_DIR && node run.js "..."`) for simple tasks. This design allows for direct embedding of arbitrary JavaScript code into a `node` command, creating a critical Remote Code Execution (RCE) vulnerability via prompt injection. A malicious user could exploit this to execute arbitrary commands on the host system, such as reading sensitive files, exfiltrating data, or installing backdoors. This is a severe vulnerability, not intentional malice by the skill itself, hence classified as suspicious.