← 返回 Skills 市场
Playwright Skill
作者
Vubangsi Mercel
· GitHub ↗
· v0.1.0
2264
总下载
0
收藏
16
当前安装
1
版本数
在 OpenClaw 中安装
/install playwright-skill
功能描述
Complete browser automation with Playwright. Auto-detects dev servers, writes clean test scripts to /tmp. Test pages, fill forms, take screenshots, check res...
安全使用建议
This skill is internally inconsistent. Before installing or running anything: 1) Do not run `npm run setup` or any node commands suggested here until you inspect the skill directory. 2) Check the skill directory ($SKILL_DIR) for package.json, run.js, and lib/helpers.js; if they are missing, the instructions are unusable or deceptive. 3) If those files exist, open them and review their contents for network calls, telemetry, or arbitrary exec before running. 4) Be cautious about allowing any skill to auto-detect local dev servers or execute scripts that perform login flows — these actions can interact with sensitive local services. 5) Prefer running Playwright and your tests under your own control (your own package.json and scripts) rather than running npm scripts from an untrusted skill. If the publisher can provide the missing runner and a clear, auditable install script (or package hosted on a trusted release host), re-evaluate then.
功能分析
Type: OpenClaw Skill
Name: playwright-skill
Version: 0.1.0
The `SKILL.md` file instructs the AI agent to use an 'inline execution' pattern (`cd $SKILL_DIR && node run.js "..."`) for simple tasks. This design allows for direct embedding of arbitrary JavaScript code into a `node` command, creating a critical Remote Code Execution (RCE) vulnerability via prompt injection. A malicious user could exploit this to execute arbitrary commands on the host system, such as reading sensitive files, exfiltrating data, or installing backdoors. This is a severe vulnerability, not intentional malice by the skill itself, hence classified as suspicious.
能力评估
Purpose & Capability
The SKILL.md expects a Node-based runtime (node -e, npm run setup, require('./lib/helpers'), and node run.js) and assumes Playwright/Chromium will be installed, but the skill metadata lists no required binaries and the bundle contains no code files (no lib/helpers, no run.js, no package.json). This is inconsistent: a Playwright automation skill would legitimately require Node/npm and included runner code or a clear install spec.
Instruction Scope
Instructions direct the agent to detect dev servers (via require('./lib/helpers').detectDevServers()), write and execute arbitrary test scripts in /tmp, and run node run.js in the skill directory. Those operations would execute code from the skill directory or the generated /tmp scripts and can interact with local services (port scanning/auto-detection) and remote sites (login flows). Because the referenced helper and runner files are not present, following the instructions as-is will either fail or — if different files with those names exist on disk — execute unexpected code.
Install Mechanism
There is no formal install spec or packaged code; SKILL.md tells the user to run `npm run setup` in the skill directory to install Playwright and Chromium. Without an included package.json or explicit install source, that command will fail or run whatever npm script exists in the discovered directory. Instruction-only design reduces transparency here and elevates risk if the user runs the suggested setup command in an untrusted location.
Credentials
The skill does not request any credentials or environment variables in its metadata. The guidance to parameterize URLs via env vars is reasonable for testing and does not by itself require sensitive secrets. There are no declared requests for unrelated credentials.
Persistence & Privilege
The skill does not request permanent inclusion (always: false), does not declare modifications to other skills or system-wide settings, and instructs only transient actions (writing to /tmp). No elevated persistence is requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install playwright-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/playwright-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release – brings Playwright-powered browser automation to any project.
- Auto-detects running localhost dev servers before starting tests.
- Writes Playwright test scripts to /tmp to avoid cluttering project files.
- Supports common browser tasks: UI testing, form automation, screenshots, responsive checks, login flow validation, broken link checks, and more.
- Always opens the browser visibly for debugging unless headless mode is requested.
- URLs are parameterized and configurable at the top of each script.
- Clear step-by-step workflow and robust usage documentation included.
元数据
常见问题
Playwright Skill 是什么？
Complete browser automation with Playwright. Auto-detects dev servers, writes clean test scripts to /tmp. Test pages, fill forms, take screenshots, check res... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 2264 次。
如何安装 Playwright Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install playwright-skill」即可一键安装，无需额外配置。
Playwright Skill 是免费的吗？
是的，Playwright Skill 完全免费（开源免费），可自由下载、安装和使用。
Playwright Skill 支持哪些平台？
Playwright Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Playwright Skill？
由 Vubangsi Mercel（@vmercel）开发并维护，当前版本 v0.1.0。
推荐 Skills