Loading npm security reports…

ttj-skills-playwright@1.4.13: Suspicious npm security report | LPM Firewall

registry / ttj-skills-playwright / 1.4.13

ttj-skills-playwright@1.4.13

Drive an existing Chrome over CDP (Playwright core) with one-shot commands — eval, goto, click, type, wait, tabs, screenshot — plus page element visualization and crawl-target analysis. Skill for Claude Code & Codex.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Installation writes a package-owned Claude/Codex skill into user-global skill directories. Running the bare CLI contacts npm and can globally replace the package with the newest published version before launching Chrome. No concrete credential theft or remote payload endpoint is present in this version.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

`npm install` executes `postinstall`; running bare `ttj-skills-playwright` triggers self-update.

Impact

Creates persistent agent instructions and permits later registry-published code to replace the global CLI without a separate user update command.

Mechanism

Global agent-skill installation plus automatic npm global self-update.

Rationale

The package has real lifecycle and agent-extension risk, amplified by automatic global self-updating. Its writes are package-scoped and source inspection found no concrete malicious chain, so blocking is not supported.

Evidence

package.jsonscripts/install-skill.jsdist/cli.jsdist/browser.jsdist/utils.jsdist/cdp.js.claude/skills/ttj-skills-playwright/SKILL.md~/.claude/skills/ttj-skills-playwright/SKILL.md~/.agents/skills/ttj-skills-playwright/SKILL.md~/.ttj-skills-playwright-installed~/.ttj-skills-playwright

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-skill.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/utils.jsView file

5import path from 'path'; L6: import net from 'net'; L7: import http from 'http'; L8: import https from 'https'; L9: import { exec } from 'child_process'; L10: import { promisify } from 'util'; ... L18: */ L19: export const getOsType = () => process.platform === 'win32' L20: ? 'windows' ... L26: */ L27: export const getHomeDir = () => os.homedir(); L28: /**

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/utils.jsView on unpkg · L5

•matchType = normalized_sha256 matchedPackage = ttj-sk[redacted]@1.4.10 matchedPath = dist/utils.js matchedIdentity = npm:dHRqLXNraWxscy1wbGF5d3JpZ2h0:1.4.10 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/utils.jsView on unpkg

scripts/install-skill.jsView file

14Install-time AI-agent control hijack evidence: L14: const skillName = 'ttj-sk[redacted]'; L15: const sk[redacted] = path.join(__dirname, '..', '.claude', 'skills', skillName); L16: const skillFile = 'SKILL.md'; ... L19: if (!fs.existsSync(dir)) { L20: fs.mkdirSync(dir, { recursive: true }); L21: } ... L53: // Claude Code: 기존 /ttj-sk[redacted] 호출 방식 유지 L54: const claudeTargetDir = path.join(homedir(), '.claude', 'skills', skillName); L55: const claudeTargetFile = path.join(claudeTargetDir, skillFile); L56: ensureDir(claudeTargetDir); L57: fs.copyFileSync(sourceFile, claudeTargetFile); L58: console.log(`✅ Claude Code 스킬 설치 완료: ${claudeTargetFile}`); Payload evidence from .claude/skills/ttj-sk[redacted]/SKILL.md: L40: L41: When the skill is activated, always start with the bare command `ttj-

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/install-skill.jsView on unpkg · L14

dist/browser.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = ttj-sk[redacted]@1.4.12 matchedIdentity = npm:dHRqLXNraWxscy1wbGF5d3JpZ2h0:1.4.12 similarity = 0.643 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/browser.jsView on unpkg

Source & flagged code

5 flagged

package.jsonView file

Lines 1-39json

1{

2 "name": "ttj-skills-playwright",

3 "version": "1.4.13",

4 "description": "Drive an existing Chrome over CDP (Playwright core) with one-shot commands — eval, goto, click, type, wait, tabs, screenshot — plus page element visualization and crawl-target analysis. Skill for Claude Code & Codex.",

5 "type": "module",

6 "bin": {

7 "ttj-skills-playwright": "dist/cli.js"

8 },

9 "main": "./dist/cli.js",

10 "files": [

11 "dist",

12 ".claude/skills",

13 "scripts"

14 ],

15 "scripts": {

16 "build": "tsc",

17 "start": "node dist/cli.js",

18 "prepare": "npm run build",

19 "postinstall": "node scripts/install-skill.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L19

20 },

21 "dependencies": {

22 "chalk": "^5.3.0",

23 "playwright-core": "^1.61.1"

24 },

25 "devDependencies": {

26 "typescript": "^5.4.0",

27 "@types/node": "^20.11.0"

28 },

29 "keywords": [

30 "playwright",

31 "cdp",

32 "chrome",

33 "browser",

34 "automation",

35 "cli",

36 "crawl",

37 "scraping",

38 "claude",

39 "codex",

dist/utils.jsView file

Lines 1-25javascript

1/**

2 * ttj-skills-playwright - Utility functions (pure where possible)

3 */

4import os from 'os';

5import path from 'path';

6import net from 'net';

scripts/install-skill.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

2/**

3 * Claude Code / Codex 스킬 자동 설치

4 * npm install 후 Claude Code와 Codex의 사용자 전역 스킬 위치에 복사합니다.

5 */

6

7import fs from 'fs';

8import path from 'path';

dist/browser.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = ttj-sk[redacted]@1.4.12 matchedIdentity = npm:dHRqLXNraWxscy1wbGF5d3JpZ2h0:1.4.12 similarity = 0.643 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/browser.jsView on unpkg