UI Test

Register Playwright MCP via UTCP and perform web UI testing and verification. Analyze browser snapshots, click elements, fill forms, and return summarized re...

This skill appears to perform legitimate UI testing, but it also contains explicit remediation and system-modification instructions (process kills, deleting profile directories, SSH + docker psql DB updates, and running ansible) that go far beyond passive testing. Before installing or running it: 1) Only run this in an isolated/dev environment, not against production. 2) Require manual approval before any remediation steps (ansible, ssh/docker/psql). 3) Be cautious about the runtime npx @playwright/mcp@latest call — prefer a pinned version or audit the package before allowing dynamic installs. 4) Ensure the agent or operator has least-privilege access (do not provide blanket SSH or DB credentials). 5) If you do not want the agent to modify systems, remove or ignore the remediation sections and the register_manual calls that dynamically fetch code. If you want a safer assessment, provide logs of a sample run or a pinned Playwright MCP release and confirm whether automatic remediation should be disabled.

Type: OpenClaw Skill Name: web-ui-test Version: 0.1.0 The skill bundle provides the agent with high-privilege capabilities, including executing remote commands via SSH to perform SQL updates on a Dockerized PostgreSQL database (sso-verify.md) and using Windows system commands (taskkill, del, rmdir) to manage browser profiles (SKILL.md). While these actions are contextually relevant to SSO verification and UI testing, they grant the agent broad authority to modify system state and remote infrastructure, which poses a significant security risk if misused.