brightdata-core-workflow-a
Enables structured data scraping from JavaScript-rendered pages using Bright Data's Scraping Browser with Playwright or Puppeteer.
Install this skill
Security score
The brightdata-core-workflow-a skill was audited on May 19, 2026 and we found 11 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 55 | const AUTH = `brd-customer-${BRIGHTDATA_CUSTOMER_ID}-zone-${BRIGHTDATA_ZONE}:${BRIGHTDATA_ZONE_PASSWORD}`; |
Template literal with variable interpolation in command context
| 56 | const BROWSER_WS = `wss://${AUTH}@brd.superproxy.io:9222`; |
Template literal with variable interpolation in command context
| 104 | const AUTH = `brd-customer-${process.env.BRIGHTDATA_CUSTOMER_ID}-zone-${process.env.BRIGHTDATA_ZONE}:${process.env.BRIGHTDATA_ZONE_PASSWORD}`; |
Template literal with variable interpolation in command context
| 107 | const browser = await chromium.connectOverCDP(`wss://${AUTH}@brd.superproxy.io:9222`); |
Template literal with variable interpolation in command context
| 155 | const AUTH = `brd-customer-${process.env.BRIGHTDATA_CUSTOMER_ID}-zone-${process.env.BRIGHTDATA_ZONE}:${process.env.BRIGHTDATA_ZONE_PASSWORD}`; |
Template literal with variable interpolation in command context
| 159 | browserWSEndpoint: `wss://${AUTH}@brd.superproxy.io:9222`, |
Access to .env file
| 53 | const { BRIGHTDATA_CUSTOMER_ID, BRIGHTDATA_ZONE, BRIGHTDATA_ZONE_PASSWORD } = process.env; |
Access to .env file
| 104 | const AUTH = `brd-customer-${process.env.BRIGHTDATA_CUSTOMER_ID}-zone-${process.env.BRIGHTDATA_ZONE}:${process.env.BRIGHTDATA_ZONE_PASSWORD}`; |
Access to .env file
| 155 | const AUTH = `brd-customer-${process.env.BRIGHTDATA_CUSTOMER_ID}-zone-${process.env.BRIGHTDATA_ZONE}:${process.env.BRIGHTDATA_ZONE_PASSWORD}`; |
External URL reference
| 87 | scrapWithBrowser('https://example.com').catch(console.error); |
External URL reference
| 188 | - [Playwright CDP Docs](https://playwright.dev/docs/api/class-browsertype#browser-type-connect-over-cdp) |