playwright-browser

Use Playwright to browse websites with a real (non-headless) browser and extract data by hooking network responses. Use when the user wants to: - View a webs...

This skill contains legitimate Playwright browser automation code, but also includes example scripts that will read from and write to your home/Desktop without that being declared. Before installing or running: 1) Review or remove scripts you don't trust (notably intercept_sina_images.py and parse_attendance.py). intercept_sina_images.py will save images to ~/Desktop/sina; parse_attendance.py will read ~/Desktop/考勤 and write an Excel file — run these only on a non-sensitive machine or in a sandbox. 2) Expect Playwright to download browser binaries when you run 'playwright install chromium'. 3) Ask the publisher why an attendance parser (parse_attendance.py) is bundled with a browser-scraping skill; this looks unrelated. 4) If you must run it, run a targeted script (browser_agent.py) rather than running all included examples, and inspect any script that performs filesystem operations. 5) If you need higher assurance, run the code in an isolated VM or container and restrict its filesystem access.

Type: OpenClaw Skill Name: playwright-browser Version: 1.0.0 The skill bundle provides browser automation via Playwright but contains several significant security vulnerabilities and risky configurations. Specifically, `scripts/browser_agent.py` is vulnerable to JavaScript injection because it uses unsanitized string interpolation within `page.evaluate()` calls (e.g., in `find_links_by_text`, `search_page_content`, and `focus_on_element`). Furthermore, the browser is launched with flags that explicitly disable critical Chromium security features, such as `--disable-features=IsolateOrigins,site-per-process`, which weakens the browser's sandbox. While the included utility scripts for scraping Sina and 12306 appear to serve their stated purpose, the underlying implementation flaws pose a risk if the agent navigates to untrusted or attacker-controlled websites.