OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
This skill enables browser automation using Playwright. The primary security risk is Indirect Prompt Injection, as the agent processes untrusted external web content while possessing high-privilege capabilities such as form submission and arbitrary JavaScript execution. Additionally, the skill downloads and executes code from npm at runtime.
Detected behaviors
No alerts
No issues
4/6 files flagged