Play Music from YouTube

• Analyzed: May 12, 2026, 3:34 AM
• Findings: 1
• Version: 0.0.9
• Hash: 97d45fa948e3fafecf712df02dd6483fd2dadef38c19fd236e67bee98c076cb4
• Source: palm
• External report: View on VirusTotal

Findings (1)

This skill is classified as suspicious due to the use of `playwright-cli` with several high-risk capabilities, even though they are plausibly needed for browser automation. Specifically, the skill instructs the agent to use a `--persistent` browser profile (SKILL.md) which saves sensitive login state (cookies, localStorage, IndexedDB) to disk, and allows arbitrary JavaScript execution via `playwright-cli eval` (SKILL.md, references/playwright-ref.md). The `playwright-cli` tool also has capabilities to save/load browser state to/from files (`state-save`/`state-load`) and take screenshots (`screenshot`), which could be leveraged for data exfiltration, although the current instructions do not explicitly direct such malicious use. Additionally, the skill requires the user to grant broad macOS system permissions (Screen Recording, Automation, Accessibility) for `playwright-cli` to function.