Playwright WS

Browser automation via remote Playwright WebSocket server for screenshots, PDFs and testing.

This skill appears to do what it claims: connect to a Playwright WebSocket server to take screenshots, generate PDFs, and run tests. Before installing, make sure: 1) PLAYWRIGHT_WS points to a server you trust — that server can view and control every page you open (so do not point it at pages with secrets unless you trust the operator); 2) you understand npm install will pull the Playwright package (and may download browser binaries) — set PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD if you want to avoid browser downloads; 3) prefer wss:// URLs when crossing untrusted networks; 4) review package.json/package-lock if you require strict dependency vetting. If you need to avoid any remote exposure, run Playwright locally instead of using a remote WS endpoint.

Type: OpenClaw Skill Name: playwright-ws Version: 1.0.2 The playwright-ws skill bundle provides legitimate browser automation tools for generating screenshots, PDFs, and running tests via a remote Playwright WebSocket server. The implementation is well-documented, includes a comprehensive test suite, and follows security best practices by using spawnSync with array arguments in scripts like test-runner.js and package-skill.js to prevent shell injection. No evidence of data exfiltration, malicious persistence, or prompt injection was found.