playwright-best-practices
Offers best practices for writing resilient Playwright tests, including locator strategies and web-first assertions.
Install this skill
Security score
The playwright-best-practices skill was audited on Feb 12, 2026 and we found 18 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 126 | this.log = debug(`test:page:${this.constructor.name}`); |
Template literal with variable interpolation in command context
| 248 | page.on('console', msg => console.log(`[browser] ${msg.text()}`)); |
Template literal with variable interpolation in command context
| 349 | await request.delete(`/api/users/${userId}`); // Depends on previous! |
Template literal with variable interpolation in command context
| 355 | const deleteResponse = await request.delete(`/api/users/${id}`); |
Template literal with variable interpolation in command context
| 447 | await this.page.request.delete(`/api/users/${id}`); |
Template literal with variable interpolation in command context
| 455 | email: `test-${Date.now()}@example.com`, |
Access to .env file
| 26 | reporter: process.env.CI || process.env.CLAUDE |
Access to .env file
| 266 | await page.getByLabel('Email').fill(process.env.TEST_USER_EMAIL!); |
Access to .env file
| 267 | await page.getByLabel('Password').fill(process.env.TEST_USER_PASSWORD!); |
Access to .env file
| 296 | data: { email: process.env.TEST_USER_EMAIL, password: process.env.TEST_USER_PASSWORD }, |
Access to .env file
| 369 | forbidOnly: !!process.env.CI, |
Access to .env file
| 370 | retries: process.env.CI ? 2 : 0, |
Access to .env file
| 371 | workers: process.env.CI ? 1 : undefined, |
Access to .env file
| 373 | reporter: process.env.CI || process.env.CLAUDE |
Access to .env file
| 378 | baseURL: process.env.BASE_URL ?? 'http://localhost:3000', |
Access to .env file
| 406 | reuseExistingServer: !process.env.CI, |
External URL reference
| 378 | baseURL: process.env.BASE_URL ?? 'http://localhost:3000', |
External URL reference
| 405 | url: 'http://localhost:3000', |
Install this skill with one command
/learn @neversight/playwright-best-practices