Request review
A

Is webapp-testing safe?

anthropics/skills · scanned Oct 4, 2026

What it says it does

Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.

A
Score 90/100

No significant risks found by the automated scan.

Medium · 1Low · 2
Source
Repository
anthropics/skills/skills/webapp-testing
Commit
8a1541c4a3ff
Scanned
Oct 4, 2026
Files checked
6
Stars
180k
License
None declared
Last push
Oct 3, 2026
What it can reach
External domains mentioned anywhere in the skill's files.
www.apache.org
Findings (3)
Pattern matches are leads, not proof. A finding in documentation is often harmless; one in a script deserves a closer look.
MediumEvaluates code dynamicallyCode execution

eval/exec on strings makes it impossible to know what will run by reading the code.

skills/webapp-testing/scripts/with_server.py:71

shell=True,
LowRuns shell commandsCode execution

Many legitimate skills run commands. Check that the commands match what the skill says it does.

skills/webapp-testing/scripts/with_server.py:69

process = subprocess.Popen(
LowRuns shell commandsCode execution

Many legitimate skills run commands. Check that the commands match what the skill says it does.

skills/webapp-testing/scripts/with_server.py:88

result = subprocess.run(args.command)
Files scanned (6)
  • skills/webapp-testing/examples/console_logging.py (1.0 KB)
  • skills/webapp-testing/examples/element_discovery.py (1.4 KB)
  • skills/webapp-testing/examples/static_html_automation.py (953 B)
  • skills/webapp-testing/LICENSE.txt (11.1 KB)
  • skills/webapp-testing/scripts/with_server.py (3.6 KB)
  • skills/webapp-testing/SKILL.md (3.8 KB)
Add the badge to your README
Shows the current grade and links back to this report. It updates when the skill is rescanned.
SkillsVetted grade A
[![SkillsVetted grade](https://skillsvetted.com/badge/anthropics/webapp-testing.svg)](https://skillsvetted.com/skills/anthropics/webapp-testing)
Rescan
Pull the latest commit from GitHub and update this listing.
Want a human to check it?

A full review covers what pattern matching can't: intent, logic and behavior in a sandbox.

Request full review