chrome
Automates browser interactions for testing and data extraction using Puppeteer or Playwright, enhancing web automation capabilities.
Install this skill
or
34/100
Security score
The chrome skill was audited on Feb 9, 2026 and we found 10 security issues across 2 threat categories, including 4 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 132
Eval function call - arbitrary code execution
SourceSKILL.md
| 132 | await page.$eval('#email', el => el.value = ''); // Puppeteer clear |
high line 174
Eval function call - arbitrary code execution
SourceSKILL.md
| 174 | const text = await page.$eval('#element', el => el.textContent); |
high line 178
Eval function call - arbitrary code execution
SourceSKILL.md
| 178 | const href = await page.$eval('a', el => el.href); |
high line 181
Eval function call - arbitrary code execution
SourceSKILL.md
| 181 | const items = await page.$$eval('.item', els => |
low line 32
External URL reference
SourceSKILL.md
| 32 | await page.goto('https://example.com'); |
low line 60
External URL reference
SourceSKILL.md
| 60 | await page.goto('https://example.com'); |
low line 72
External URL reference
SourceSKILL.md
| 72 | await page.goto('https://example.com'); |
low line 75
External URL reference
SourceSKILL.md
| 75 | await page.goto('https://example.com', { waitUntil: 'networkidle0' }); |
low line 209
External URL reference
SourceSKILL.md
| 209 | await page.goto('https://app.example.com/login'); |
low line 221
External URL reference
SourceSKILL.md
| 221 | await page.goto('https://example.com/form'); |
Scanned on Feb 9, 2026
View Security DashboardGitHub Stars 106
Rate this skill
Categorydevelopment
UpdatedMay 21, 2026
majiayu000/claude-skill-registry