首页龙虾技能列表 › Playwright MCP Skill — Playwright MCP 技能

Playwright MCP Skill — Playwright MCP 技能

v1.0.0

Playwright MCP 技能工具。

0· 408·5 当前·5 累计
by @jolestar·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/13
安全扫描
VirusTotal
可疑
查看报告
OpenClaw
可疑
medium confidence
The skill's instructions mostly match its purpose (running @playwright/mcp via uxc/npx) but it references persistent profile paths and an environment variable not declared in metadata and relies on on-demand npm execution — these mismatches and runtime fetches warrant caution.
评估建议
This skill appears to do what it says (drive Playwright MCP over uxc/npx) but has some concerning gaps. Before installing or running it: 1) review and decide whether you trust on-demand npm execution (npx @playwright/mcp@latest); consider pinning a specific version instead of @latest; 2) be aware the skill suggests creating persistent CLI links and a profile directory (~/.uxc/playwright-profile) that will store session state (cookies/tokens) — only use shared-profile mode if you understand and a...
详细分析 ▾
用途与能力
Name/description, CLI examples, and uxc link guidance align with the stated goal of running @playwright/mcp via stdio. However the docs repeatedly reference a shared profile directory (~/.uxc/playwright-profile) and a daemon-exclusive env var (UXC_DAEMON_EXCLUSIVE) even though the skill metadata declares no config paths or env requirements — that's an unexplained config access pattern.
指令范围
The SKILL.md instructs the agent to create fixed CLI links (uxc link), manipulate a local profile directory (~/.uxc/playwright-profile), stop the uxc daemon, and suggests setting UXC_DAEMON_EXCLUSIVE — these are side effects beyond simple stateless automation. The skill references an environment variable (UXC_DAEMON_EXCLUSIVE) and a filesystem path but the public requirements do not declare those, and the instructions grant the skill authority to read/write persistent profile state.
安装机制
There is no install spec in the registry (instruction-only). Runtime execution relies on npx -y @playwright/mcp@latest which will fetch and run code from npm on first use. This is expected for a Node CLI integration but is a moderate operational risk (remote code execution on first run) and would be safer if a pinned version or explicit install step were recommended.
凭证需求
The skill declares no required env vars but the docs reference UXC_DAEMON_EXCLUSIVE and instruct storing user-data under ~/.uxc/playwright-profile. Requesting or relying on a persistent user-data-dir can expose cookies/tokens and is not declared in metadata; absence of declared env/config requirements is an inconsistency.
持久化与权限
always is false and model invocation is allowed (normal). The skill's recommended setup creates persistent CLI links (uxc link) and optional shared-profile storage, which gives it ongoing presence (stored profile data and created command wrappers). This is plausible for the use case but increases the blast radius compared to a purely ephemeral workflow.
安全有层次,运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发,无需署名。

运行时依赖

无特殊依赖

版本

latestv1.0.02026/3/3

- Initial release of playwright-mcp-skill for deterministic browser automation via @playwright/mcp over UXC stdio MCP. - Supports daemon-friendly session reuse and safe action guardrails. - Default workflow includes headless, isolated sessions; persistent shared profiles are optionally supported. - Provides fixed command linking with `playwright-mcp-cli` for streamlined usage. - Enforces JSON envelope protocol parsing and explicit guardrails for safe browser actions. - Designed for CLI integration with prerequisites for Node.js, npx, and uxc.

● 可疑

安装命令 点击复制

官方npx clawhub@latest install playwright-mcp-skill
镜像加速npx clawhub@latest install playwright-mcp-skill --registry https://cn.clawhub-mirror.com

技能文档

Use this skill to run Playwright MCP operations through uxc using fixed stdio endpoints.

Reuse the uxc skill for generic protocol discovery, auth/error handling, and envelope parsing rules.

Prerequisites

  • uxc installed 和 可用 在...中 PATH.
  • npx 可用 在...中 PATH (节点.js installed).
  • Network access 对于 第一个-时间 @playwright/mcp 包 获取.
  • Browser runtime 可以 开始 locally (headless mode 默认 在...中 skill).

Core Workflow (Playwright-Specific)

Endpoint candidate inputs before finalizing:

  • Raw 包 表单 从 docs: npx @playwright/mcp@latest
  • Reliable non-interactive 表单: npx -y @playwright/mcp@latest
  • Isolated/headless stable 表单 (默认 对于 skill):
- npx -y @playwright/mcp@latest --headless --isolated - Shared-个人资料 headless 表单 (对于 persistent 登录 state): - npx -y @playwright/mcp@latest --headless --用户-data-dir ~/.uxc/playwright-个人资料 - Shared-个人资料 headed 表单 (对于 interactive debug 带有 相同 登录 state): - npx -y @playwright/mcp@latest --用户-data-dir ~/.uxc/playwright-个人资料

  • 验证 protocol/path 从 official source 和 probe:
- Official source: https://github.com/microsoft/playwright-mcp - probe candidate endpoints 带有: - uxc "npx -y @playwright/mcp@latest --headless --isolated" -h - Confirm protocol MCP stdio (protocol == "mcp" 在...中 envelope).
  • Detect auth requirement explicitly:
- Run host help 或 minimal 读取 call 和 inspect envelope. - @playwright/mcp 默认 flow 否 OAuth/API 键 对于 local stdio 使用.
  • 使用 fixed 链接 command 由 默认:
- command -v playwright-mcp-cli - 如果 missing, 创建 : - uxc 链接 playwright-mcp-cli "npx -y @playwright/mcp@latest --headless --isolated" - 可选 shared-个人资料 dual command setup 对于 persistent sessions: - command -v playwright-mcp-headless - command -v playwright-mcp-ui - uxc 链接 --daemon-exclusive ~/.uxc/playwright-个人资料 playwright-mcp-headless "npx -y @playwright/mcp@latest --headless --用户-data-dir ~/.uxc/playwright-个人资料" - uxc 链接 --daemon-exclusive ~/.uxc/playwright-个人资料 playwright-mcp-ui "npx -y @playwright/mcp@latest --用户-data-dir ~/.uxc/playwright-个人资料" - playwright-mcp-cli -h - 如果 command conflict detected 和 cannot safely reused, 停止 和 ask skill maintainers 到 pick 另一个 fixed command name.
  • Inspect operation schema 之前 execution:
- playwright-mcp-cli browser_navigate -h - playwright-mcp-cli browser_snapshot -h - playwright-mcp-cli browser_click -h
  • Prefer 读取-第一个 interaction:
- 开始 带有 导航/snapshot 之前 mutating page state.
  • Execute actions 带有 explicit confirmation 当...时 impact high:
- Confirm 之前 表单 submission, checkout, 删除/destructive actions, 或 irreversible multi-step flows.

Guardrails

  • Keep automation 在...上 JSON 输出 envelope; 做 不 rely 在...上 --text.
  • 解析 stable fields 第一个: ok, kind, protocol, data, 错误.
  • 使用 playwright-mcp-cli 作为 默认 command path.
  • playwright-mcp-cli ... equivalent 到 uxc "npx -y @playwright/mcp@latest --headless --isolated" ....
  • 使用 direct uxc "" ... 仅 作为 temporary fallback 当...时 链接 setup 不可用.
  • 如果 browser 个人资料 conflict appears, keep --isolated 在...中 endpoint 和 重试 通过 相同 fixed 链接 command.
  • 当...时 使用 shared --用户-data-dir, run headless/headed links serially (不 concurrently).
  • 到 enable seamless switching 之间 headed UI 登录 和 headless CLI automation 使用 相同 个人资料 directory, 设置 daemon exclusive 键:
- Prefer 链接-level setup (recommended 上面), 或 设置 UXC_DAEMON_EXCLUSIVE=~/.uxc/playwright-个人资料 对于 ad-hoc runs. - 如果 个人资料 仍然 busy (另一个 会话 actively running), fallback: uxc daemon 停止
  • Prefer browser_snapshot 在...上 screenshots 对于 模型-action loops.

References

  • Invocation patterns:
- references/usage-patterns.md

数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制

了解定制服务