Is playwright-pdf-snapshot safe to install?

SaferSkills independently audited playwright-pdf-snapshot (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/playwright-pdf-snapshot/SKILL.md · 1 file

skills/playwright-pdf-snapshot/SKILL.md2.1 KB · Markdown

name: playwright-pdf-snapshot

description: "Render any URL to a headless PDF or PNG snapshot with Playwright and no committed cookies. Use when the user asks to archive a page, capture a dashboard/report, make a PDF snapshot, or save a page screenshot for downstream review."

version: "1.0.0"

Playwright PDF Snapshot

Use this skill when a script needs a browser-rendered artifact from a URL: a PDF report, a full-page PNG, or a dashboard capture. The helper runs Chromium headless through Playwright, accepts optional extra headers from the caller, and does not ship cookies or credentials.

When to invoke

User says: "save this page as PDF", "capture a PNG snapshot", "archive the dashboard", "render this report URL".
The page needs browser rendering rather than a raw HTTP download.

When NOT to invoke

The URL is a static file that can be downloaded directly.
The page requires a persisted login session; use [[playwright-login-session]] first and keep state files gitignored.

Concrete example

User input:

Render the public report URL to both a PDF and a PNG after the run finishes.

Output:

# Copy assets/snapshot.py into your project, then:
from snapshot import snapshot

paths = snapshot("https://example.com/report", out_dir="artifacts", name="report")
print(paths)

Install Playwright in the target project with pip install playwright and python -m playwright install chromium. Do not commit cookies, storage state, or private headers.

Pattern to apply

Use headless Chromium and wait for network idle or a specific selector before capturing.
Save both PDF and PNG only when the downstream workflow needs both.
Keep auth out of this helper; pass public URLs or combine with a local, gitignored Playwright state file.
Use stable filenames so artifact upload steps can find them.
Pair with object storage when snapshots need to survive the local run.

Reference: assets/snapshot.py.

Source

Distilled from production use across the author's automation projects. v1.0.0. See also: [[playwright-login-session]], [[s3-uploader]], [[csv-report-writer]].

→ Build the full runnable bot with Trawlkit.

playwright-pdf-snapshot— agent skill

Is playwright-pdf-snapshot safe to install?

Playwright PDF Snapshot

When to invoke

When NOT to invoke

Concrete example

Pattern to apply

Source

Audit the pieces. Scan the whole. Decide.