tdg-personal/ui-demo
Record polished UI demo videos using Playwright. Use when the user asks to create a demo, walkthrough, screen recording, or tutorial video of a web application. Produces WebM videos with visible cursor, natural pacing, and professional feel.
72
90%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The skill's SKILL.md Discovery and scripting steps instruct the agent to navigate to the target site (page.goto using BASE_URL) and run page.evaluate()/DOM scraping to dump and interpret page elements, so arbitrary/untrusted public web pages could influence selector choice and subsequent automated actions.
Where we found it
BASE_URL (user-supplied target site via QA_BASE_URL / localhost:3000)
domain · 4 sites
The plugin instructs the agent to navigate to a user-specified web application (BASE_URL) and scrape its DOM content (element tags, types, names, placeholders, textContent, roles) via page.evaluate(), then the agent interprets this scraped content to choose selectors and drive subsequent automated actions, creating an indirect prompt injection surface.
SKILL.md
360
const BASE_URL = process.env.QA_BASE_URL || 'http://localhost:3000';
SKILL.md
392
await page.goto(`${BASE_URL}/dashboard`);
SKILL.md
37
const fields = await page.evaluate(() => {
SKILL.md
105
const found = await page.evaluate(() => {
- Audited
- Security analysis