by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's instructions mostly match its purpose (running @playwright/mcp via uxc/npx) but it references persistent profile paths and an environment variable not declared in metadata and relies on on-demand npm execution — these mismatches and runtime fetches warrant caution.
评估建议
This skill appears to do what it says (drive Playwright MCP over uxc/npx) but has some concerning gaps. Before installing or running it: 1) review and decide whether you trust on-demand npm execution (npx @playwright/mcp@latest); consider pinning a specific version instead of @latest; 2) be aware the skill suggests creating persistent CLI links and a profile directory (~/.uxc/playwright-profile) that will store session state (cookies/tokens) — only use shared-profile mode if you understand and a...详细分析 ▾
ℹ 用途与能力
Name/description, CLI examples, and uxc link guidance align with the stated goal of running @playwright/mcp via stdio. However the docs repeatedly reference a shared profile directory (~/.uxc/playwright-profile) and a daemon-exclusive env var (UXC_DAEMON_EXCLUSIVE) even though the skill metadata declares no config paths or env requirements — that's an unexplained config access pattern.
⚠ 指令范围
The SKILL.md instructs the agent to create fixed CLI links (uxc link), manipulate a local profile directory (~/.uxc/playwright-profile), stop the uxc daemon, and suggests setting UXC_DAEMON_EXCLUSIVE — these are side effects beyond simple stateless automation. The skill references an environment variable (UXC_DAEMON_EXCLUSIVE) and a filesystem path but the public requirements do not declare those, and the instructions grant the skill authority to read/write persistent profile state.
ℹ 安装机制
There is no install spec in the registry (instruction-only). Runtime execution relies on npx -y @playwright/mcp@latest which will fetch and run code from npm on first use. This is expected for a Node CLI integration but is a moderate operational risk (remote code execution on first run) and would be safer if a pinned version or explicit install step were recommended.
⚠ 凭证需求
The skill declares no required env vars but the docs reference UXC_DAEMON_EXCLUSIVE and instruct storing user-data under ~/.uxc/playwright-profile. Requesting or relying on a persistent user-data-dir can expose cookies/tokens and is not declared in metadata; absence of declared env/config requirements is an inconsistency.
ℹ 持久化与权限
always is false and model invocation is allowed (normal). The skill's recommended setup creates persistent CLI links (uxc link) and optional shared-profile storage, which gives it ongoing presence (stored profile data and created command wrappers). This is plausible for the use case but increases the blast radius compared to a purely ephemeral workflow.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/3
- Initial release of playwright-mcp-skill for deterministic browser automation via @playwright/mcp over UXC stdio MCP. - Supports daemon-friendly session reuse and safe action guardrails. - Default workflow includes headless, isolated sessions; persistent shared profiles are optionally supported. - Provides fixed command linking with `playwright-mcp-cli` for streamlined usage. - Enforces JSON envelope protocol parsing and explicit guardrails for safe browser actions. - Designed for CLI integration with prerequisites for Node.js, npx, and uxc.
● 可疑
安装命令
点击复制官方npx clawhub@latest install playwright-mcp-skill
镜像加速npx clawhub@latest install playwright-mcp-skill --registry https://cn.longxiaskill.com 镜像可用
本土化适配说明
Playwright MCP Skill — Playwright MCP 技能 安装说明： 安装命令：npx clawhub@latest install playwright-mcp-skill
技能文档
Use this skill to run Playwright MCP operations through uxc using fixed stdio endpoints.
Reuse the uxc skill for generic protocol discovery, auth/error handling, and envelope parsing rules.
Prerequisites
uxcinstalled 和 可用 在...中PATH.npx可用 在...中PATH(节点.js installed).- Network access 对于 第一个-时间
@playwright/mcp包 获取. - Browser runtime 可以 开始 locally (headless mode 默认 在...中 skill).
Core Workflow (Playwright-Specific)
Endpoint candidate inputs before finalizing:
- Raw 包 表单 从 docs:
npx @playwright/mcp@latest - Reliable non-interactive 表单:
npx -y @playwright/mcp@latest - Isolated/headless stable 表单 (默认 对于 skill):
npx -y @playwright/mcp@latest --headless --isolated
- Shared-个人资料 headless 表单 (对于 persistent 登录 state):
- npx -y @playwright/mcp@latest --headless --用户-data-dir ~/.uxc/playwright-个人资料
- Shared-个人资料 headed 表单 (对于 interactive debug 带有 相同 登录 state):
- npx -y @playwright/mcp@latest --用户-data-dir ~/.uxc/playwright-个人资料- 验证 protocol/path 从 official source 和 probe:
https://github.com/microsoft/playwright-mcp
- probe candidate endpoints 带有:
- uxc "npx -y @playwright/mcp@latest --headless --isolated" -h
- Confirm protocol MCP stdio (protocol == "mcp" 在...中 envelope).
- Detect auth requirement explicitly:
@playwright/mcp 默认 flow 否 OAuth/API 键 对于 local stdio 使用.
- 使用 fixed 链接 command 由 默认:
command -v playwright-mcp-cli
- 如果 missing, 创建 :
- uxc 链接 playwright-mcp-cli "npx -y @playwright/mcp@latest --headless --isolated"
- 可选 shared-个人资料 dual command setup 对于 persistent sessions:
- command -v playwright-mcp-headless
- command -v playwright-mcp-ui
- uxc 链接 --daemon-exclusive ~/.uxc/playwright-个人资料 playwright-mcp-headless "npx -y @playwright/mcp@latest --headless --用户-data-dir ~/.uxc/playwright-个人资料"
- uxc 链接 --daemon-exclusive ~/.uxc/playwright-个人资料 playwright-mcp-ui "npx -y @playwright/mcp@latest --用户-data-dir ~/.uxc/playwright-个人资料"
- playwright-mcp-cli -h
- 如果 command conflict detected 和 cannot safely reused, 停止 和 ask skill maintainers 到 pick 另一个 fixed command name.
- Inspect operation schema 之前 execution:
playwright-mcp-cli browser_navigate -h
- playwright-mcp-cli browser_snapshot -h
- playwright-mcp-cli browser_click -h
- Prefer 读取-第一个 interaction:
- Execute actions 带有 explicit confirmation 当...时 impact high:
Guardrails
- Keep automation 在...上 JSON 输出 envelope; 做 不 rely 在...上
--text. - 解析 stable fields 第一个:
ok,kind,protocol,data,错误. - 使用
playwright-mcp-cli作为 默认 command path. playwright-mcp-cli ...equivalent 到uxc "npx -y @playwright/mcp@latest --headless --isolated" ....- 使用 direct
uxc "" ...仅 作为 temporary fallback 当...时 链接 setup 不可用. - 如果 browser 个人资料 conflict appears, keep
--isolated在...中 endpoint 和 重试 通过 相同 fixed 链接 command. - 当...时 使用 shared
--用户-data-dir, run headless/headed links serially (不 concurrently). - 到 enable seamless switching 之间 headed UI 登录 和 headless CLI automation 使用 相同 个人资料 directory, 设置 daemon exclusive 键:
UXC_DAEMON_EXCLUSIVE=~/.uxc/playwright-个人资料 对于 ad-hoc runs.
- 如果 个人资料 仍然 busy (另一个 会话 actively running), fallback: uxc daemon 停止
- Prefer
browser_snapshot在...上 screenshots 对于 模型-action loops.
References
- Invocation patterns:
references/usage-patterns.md