Skill Scanner · playwright-skill

independent scanner by Cisco AI Defense · skill by huuanh20 · how it works ↗

FAILmax severity: CRITICAL

Skill does not specify a license; Dangerous code execution functions that can execute arbitrary code; Outbound network request primitives in JavaScript/TypeScript; +2 more

scanned 2026-08-22

Findings (9)

INFOpolicy_violation

Skill does not specify a license

SKILL.md

CRITICALcommand_injection

Dangerous code execution functions that can execute arbitrary code

lib\helpers.js:130

MEDIUMdata_exfiltration

Outbound network request primitives in JavaScript/TypeScript

lib\helpers.js:303

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

run.js:4

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

run.js:21

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

run.js:22

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

run.js:39

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

run.js:51

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

run.js:194

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNING

Findings of HIGH severity

FAILthis skill

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete