·
Last changedVersion:
This version passed the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 7. Classified findings closed: 2. Classified findings remaining: 5. Unclassified scanner findings remaining: 0. Review findings closed: 0. Review findings remaining: 16.
5
2
3
2
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
scripts/playwright_cli.sh | Supply Chain & Install-Time Trust | — | Medium | Open | |
NOTICE.txt | Sensitive Data & Secret Exposure | Agent snooping | Medium | Open | |
SKILL.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
SKILL.md | Sensitive Data & Secret Exposure | Agent snooping | Medium | Closed | |
references/cli.md | Sensitive Data & Secret Exposure | Agent snooping | Medium | Closed | |
SKILL.md | Malicious Code & Command Execution | — | Low | Open | |
SKILL.md | Supply Chain & Install-Time Trust | Install-time download and execute | Low | Open |
7 findings
Drive a real browser from the terminal using playwright-cli. Prefer the bundled wrapper script so the CLI works even when it is not globally installed.
Treat this skill as CLI-first automation. Do not pivot to @playwright/test unless the user explicitly asks for test files.
Before proposing commands, check whether npx is available (the wrapper depends on it):
If it is not available, pause and ask the user to install Node.js/npm (which provides npx). Provide these steps:
Once npx is present, proceed with the wrapper script.
Use the wrapper script:
Minimal loop:
Snapshot again after:
Refs can go stale. When a command fails due to a missing ref, snapshot again.
The wrapper script uses npx --package @playwright/cli playwright-cli so the CLI can run without a global install:
Prefer the wrapper.
Open only what you need:
references/cli.mdreferences/workflows.mde12.eval and run-code.eX and say why; do not bypass refs with run-code.--headed when a visual check will help.output/playwright/ and avoid introducing new top-level artifact folders.Get started with chainctlchainctl skill install public/openai/playwright:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/openai/skills/.curated/playwright:latest
Apache-2.0
HARDENING.md
LICENSE
NOTICE.txt
SKILL.md
agents/openai.yaml
assets/playwright-small.svg
assets/playwright.png
references/cli.md
references/workflows.md
scripts/playwright_cli.sh