Can design automation for live browsers, accounts, workflows, or infrastructure; use staging targets and human approval before destructive or account-write actions., Keep API tokens and service credentials least-privileged, and verify generated runbooks before scheduling or unattended execution.
Privacy notes
Inputs and outputs can include browser state, account metadata, workflow payloads, infrastructure inventory, logs, and operational screenshots., Redact credentials, session data, customer records, internal hostnames, and private workspace details before sharing prompts or artifacts.
Current risk score 0/100. Use staged verification before broader rollout.
Risk 0
Pre-adoption checks
Validate source and review signals before any execution.
Confirm source provenanceRequired
Source URL/provenance metadata is present.
Done
Confirm metadata review state
Listing has review metadata.
Done
Verify install payload
Install/config payload exists and can be inspected.
Done
Security checks
Confirm safety, privacy, and package integrity signals.
Review safety notesRequired
Safety notes are present.
Done
Review privacy notesRequired
Privacy notes are present.
Done
Verify package integrity metadata
Package verification/checksum metadata is available.
Done
Rollout
Adopt in controlled steps based on the selected plan.
Run in isolated sandbox firstRequired
Use a constrained sandbox and observe behavior across multiple tasks.
Pending
Roll out graduallyRequired
Roll out to a small cohort before wider usage.
Pending
Set monitoring and fallback
Define rollback path and monitor errors after adoption.
Pending
Evidence readiness
Evidence readiness matrix · balanced
Required evidence gates are covered (6/6 signals complete).
Risk 0
Source provenance
Present
Source repository/provenance is listed.
Required in this preset
Metadata review
Present
Review metadata is present.
Required in this preset
Safety notes
Present
Safety notes are present.
Required in this preset
Privacy notes
Present
Privacy notes are present.
Optional in this preset
Package integrity
Present
Package integrity metadata is present.
Optional in this preset
Install payload
Present
Install payload is available.
Required in this preset
Required evidence gates are covered for this preset.
Decision timeline
Decision timeline · balanced
6/6 steps complete with no blocking gaps for this preset.
Risk 0
triage
Confirm source provenanceRequired
Source/provenance metadata is available.
Done
triage
Check metadata review statusRequired
Review metadata is available.
Done
verify
Review safety notesRequired
Safety notes are available.
Done
verify
Review privacy notes
Privacy notes are available.
Done
verify
Validate package integrity metadata
Package integrity metadata is available.
Done
rollout
Verify install payload and commandsRequired
Install payload is available.
Done
No required blockers for this timeline preset.
Prerequisite readiness
Prerequisite readiness
3 prerequisites to line up before setup. Have accounts and credentials ready first.
0/3 ready
Account & credentials1Configuration1General1
Safety & privacy surface
Safety & privacy surface
2 safety and 2 privacy notes across 3 risk areas. Review closely: credentials & tokens.
3 areas
SafetyExecution & processesCan design automation for live browsers, accounts, workflows, or infrastructure; use staging targets and human approval before destructive or account-write actions.
SafetyCredentials & tokensKeep API tokens and service credentials least-privileged, and verify generated runbooks before scheduling or unattended execution.
PrivacyData retentionInputs and outputs can include browser state, account metadata, workflow payloads, infrastructure inventory, logs, and operational screenshots.
PrivacyCredentials & tokensRedact credentials, session data, customer records, internal hostnames, and private workspace details before sharing prompts or artifacts.
Safety notes
Can design automation for live browsers, accounts, workflows, or infrastructure; use staging targets and human approval before destructive or account-write actions.
Keep API tokens and service credentials least-privileged, and verify generated runbooks before scheduling or unattended execution.
Privacy notes
Inputs and outputs can include browser state, account metadata, workflow payloads, infrastructure inventory, logs, and operational screenshots.
Redact credentials, session data, customer records, internal hostnames, and private workspace details before sharing prompts or artifacts.
Prerequisites
Browser automation target URL(s)
Playwright MCP server configured in your agent environment
.gemini/skills/<skill-name>/SKILL.md or .agents/skills/<skill-name>/SKILL.md
cursor
Adapter
.cursor/rules/<skill-name>.mdc
cli
Manual
AGENTS.md or tool-specific context file
Full copyable content
# Trigger
"Use the Playwright MCP browser automation engineer skill for this workflow."
# Required output
1) Action graph with checkpoints
2) Stable selector strategy
3) Retry/fallback logic
4) Failure artifact plan (trace, screenshot, logs)
About this resource
Overview
This skill turns browser automation requests into deterministic workflows. It emphasizes robust selectors, explicit waits, idempotent actions, and forensic artifacts for fast debugging.
Compatibility
Native
Claude Code / Claude: native skill usage via SKILL.md.
Codex/OpenAI workflows: compatible with Agent Skills-style SKILL.md content as reusable workflow instructions.
Manual Adaptation
Gemini CLI: native skill usage via .gemini/skills/<skill-name>/SKILL.md or .agents/skills/<skill-name>/SKILL.md where supported.
Cursor: use the generated .cursor/rules/*.mdc adapter for project rules.
OpenClaw and similar agents: use the same skill content as a reusable prompt/workflow file when native skill import is unavailable.
Prerequisites
Stable environment URLs (dev/stage/prod)
Clear task objective and completion criteria
Permission-safe test accounts
What This Skill Delivers
Workflow decomposition into atomic browser steps
Selector hierarchy strategy (semantic > role > data attr > css fallback)
Retry/backoff and timeout policy
Artifact capture plan for diagnostics
How to Use This Skill
Define task intent and completion assertions.
Build selector map with priority/fallback order.
Add deterministic waits and post-action checks.
Attach failure artifacts for every critical step.
Run replay validation to verify flake resistance.
Troubleshooting
Issue: Selectors break after UI updates Fix: Prefer role/data attributes and maintain fallback selector chains.
Issue: Workflow fails intermittently Fix: Replace fixed sleeps with condition-based waits and bounded retries.
Issue: Hard to diagnose failures Fix: Persist trace, screenshot, and action logs per step with correlation IDs.
Knowledge Freshness
Treat tooling details as time-sensitive. Re-validate APIs, limits, pricing, auth models, and deployment flags immediately before implementation. If docs conflict with prior memory, follow current official docs and release notes.
Show that Playwright MCP Browser Automation Engineer Skill is listed on HeyClaude. Paste this Markdown into your README — it renders the badge and links back to this page.
[](https://heyclau.de/entry/skills/playwright-mcp-browser-automation-engineer)
How it compares
Playwright MCP Browser Automation Engineer Skill side by side with 3 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.
3 trust signals differ across this comparison (Package trust, Source provenance, Submitter).
Write and maintain reliable end-to-end tests with Playwright — Microsoft's browser automation library that auto-waits for actionable elements and runs the same suite against Chromium, Firefox, and WebKit.
Expert skill for reviewing Playwright trace artifacts, screenshots, action timelines, network events, retries, and CI evidence to classify flaky browser test failures without guessing from logs alone.
✓Can design automation for live browsers, accounts, workflows, or infrastructure; use staging targets and human approval before destructive or account-write actions.
Keep API tokens and service credentials least-privileged, and verify generated runbooks before scheduling or unattended execution.
✓Can design automation for live browsers, accounts, workflows, or infrastructure; use staging targets and human approval before destructive or account-write actions.
Keep API tokens and service credentials least-privileged, and verify generated runbooks before scheduling or unattended execution.
✓`npx playwright install --with-deps` downloads browser binaries (~500 MB for Chromium, Firefox, and WebKit) from Playwright's CDN and on Linux installs system-level packages. Review your network and environment policies before running in restricted infrastructure.
Generated tests have full browser-level access to any URL they target. Review test scripts before running them against authenticated sessions or production environments — Playwright can submit forms, click buttons, and make network requests as a real user.
✓Trace artifacts can include screenshots, DOM text, URLs, request metadata, console output, and application state; review them before sharing publicly.
Do not fix a trace-only symptom by adding broad waits, retries, or timeouts unless the trace evidence supports that change.
Keep destructive browser actions and production-like credentials out of replayed failure reproduction.
Privacy notes
✓Inputs and outputs can include browser state, account metadata, workflow payloads, infrastructure inventory, logs, and operational screenshots.
Redact credentials, session data, customer records, internal hostnames, and private workspace details before sharing prompts or artifacts.
✓Inputs and outputs can include browser state, account metadata, workflow payloads, infrastructure inventory, logs, and operational screenshots.
Redact credentials, session data, customer records, internal hostnames, and private workspace details before sharing prompts or artifacts.
✓Playwright runs entirely on your local machine. Traces, screenshots, and HTML test reports are written to local disk only and are not uploaded to Microsoft or any external service.
Trace files and failure screenshots may capture sensitive content from the application under test (form data, rendered PII, session tokens visible in URLs). Store and rotate these files appropriately.
✓Playwright traces can expose user names, emails, tokens in URLs, internal hostnames, test data, screenshots, and API payload fragments.
Public PR comments should summarize trace evidence without uploading private trace files or pasting sensitive network details.
Prerequisites
Browser automation target URL(s)
Playwright MCP server configured in your agent environment
Test credentials with least required permissions
Target web workflow with clear start and success states
Ability to run browser automation in local or CI environment
Access to auth/session strategy if login is required
Node.js 18+
Playwright 1.40+ with the @playwright/test package
Browser binaries installed via `npx playwright install` (Chromium, Firefox, WebKit)
A web application accessible for testing (local dev server, staging, or production URL)
Playwright test failure, trace artifact, test report, or CI run under review.
Access to test source, Playwright config, browser/project name, retry settings, and relevant artifacts.
Permission to inspect screenshots, DOM snapshots, console logs, network events, and request/response metadata.