P

playwright-best-practices

skills.sh/currents-dev/playwright-best-practices-skill/playwright-best-practices · v283d5cbc5d11 · Agent skill

by currents-devScan grade: Failingskills.sh · source scanned
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is playwright-best-practices a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Agent Skills
  • 1 skill

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Not declared

Check before relying on it

  • 10 high or critical findings from the scan. See the evidence
  • The publisher has not verified ownership on HOL.
  • No license declared in the manifest.

What is playwright-best-practices?

playwright-best-practices is a published agent skill plugin for AI coding agents in the Agent Skills ecosystem, developed by currents-dev and distributed through the HOL AI plugin registry. Its manifest, install commands, security signals, and community evidence are documented on this page.

Canonical slug
skills.sh/currents-dev/playwright-best-practices-skill/playwright-best-practices
Version
v283d5cbc5d11 · updated Oct 30, 2026

Trust and security

Provenance

Plugin root
.
Source repo
https://github.com/currents-dev/playwright-best-practices-skill
Source commit
283d5cbc5d11…
Publisher verified
No
Owner verified
Not owner verified
Caution
Security result
50
Security score
10
High findings
Provider
codex-plugin-scanner
Grade
F · Failing
Version
3.24.2
cisco-mcp-scanner: skipped

Security

3/16

9 checks

Operational Security

N/A

5 checks · not applicable

Best Practices

3/6

4 checks

Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

highsecurityHARDCODED_SECRET

Potential secret material was detected in advanced/authentication-flows.md.

Remove the secret from source control and load it securely at runtime.

highsecurityHARDCODED_SECRET

Potential secret material was detected in advanced/authentication.md.

Remove the secret from source control and load it securely at runtime.

highsecurityHARDCODED_SECRET

Potential secret material was detected in advanced/multi-context.md.

Remove the secret from source control and load it securely at runtime.

highsecurityHARDCODED_SECRET

Potential secret material was detected in advanced/third-party.md.

Remove the secret from source control and load it securely at runtime.

highsecurityHARDCODED_SECRET

Potential secret material was detected in architecture/pom-vs-fixtures.md.

Remove the secret from source control and load it securely at runtime.

highsecurityHARDCODED_SECRET

Potential secret material was detected in architecture/test-architecture.md.

Remove the secret from source control and load it securely at runtime.

highsecurityHARDCODED_SECRET

Potential secret material was detected in infrastructure-ci-cd/gitlab.md.

Remove the secret from source control and load it securely at runtime.

highsecurityHARDCODED_SECRET

Potential secret material was detected in testing-patterns/api-testing.md.

Remove the secret from source control and load it securely at runtime.

highsecurityHARDCODED_SECRET

Potential secret material was detected in testing-patterns/component-testing.md.

Remove the secret from source control and load it securely at runtime.

highsecurityHARDCODED_SECRET

Potential secret material was detected in testing-patterns/security-testing.md.

Remove the secret from source control and load it securely at runtime.

lowsecuritySECURITY_MD_MISSING

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

lowsecurityLICENSE_MISSING

Plugins should ship a LICENSE file so consumers can review usage rights.

Add a LICENSE file that matches the manifest license metadata.

lowbest-practicesREADME_MISSING

Plugins should document installation, usage, and security expectations in README.md.

Add a README.md that explains setup, usage, and operational constraints.

Install guidance

Install in Any agent

One command for every agent the Skills CLI detects, including Claude Code, Codex, Cursor, OpenCode, and Antigravity CLI.

Skills CLI docs
  1. 1

    Install for every detected agent

    shell
  2. 2

    Restart and verify

    Start a new session in each agent and confirm the skill is listed before relying on it. The Skills CLI lists what it installed.

    shell

To remove it later, run npx [email protected] remove currents-dev/playwright-best-practices-skill.

Did setup work in Any agent?

No setup reports for Any agent yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "source": "skills.sh",
  "evidenceState": "scanned_source",
  "skillsShId": "currents-dev/playwright-best-practices-skill/playwright-best-practices",
  "installs": 100441,
  "sourceScannedAt": "2026-10-30T15:19:44.161Z",
  "sourceScanCommit": "283d5cbc5d11aac1abda058b16ad22c317d54dc0"
}

File inventory

File inventory is unavailable for this plugin right now.

playwright-best-practices — Frequently asked questions

What is playwright-best-practices?
playwright-best-practices is an AI plugin in the HOL registry. playwright-best-practices is listed in the HOL AI plugin registry.
How do I install playwright-best-practices?
Install playwright-best-practices in your harness: Any agent — npx [email protected] add currents-dev/playwright-best-practices-skill. Full step-by-step guidance is on the HOL plugin page.
Who publishes playwright-best-practices?
playwright-best-practices is published by currents-dev and listed on HOL.

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W43. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.