playwright-skill

Battle-tested Playwright patterns for writing, debugging, and scaling reliable test suites. Use when you need guidance for E2E, API, component, visual, accessibility, or security testing, plus CI/CD, CLI automation, page objects, and migration from Cypress or Selenium. TypeScript and JavaScript.

242stars43forksUpdated 5/18/2026

DevOps & CI/CD Browser Automation Web Development Testing & QA #e2e-testing #testing #playwright #typescript #javascript #ci-cd

Security Assessment

Critical Risk(0/100)

Detected risks:

Data Exfiltration([ci/global-setup-teardown.md] fetch(`${baseURL}/api/test/seed`, { method: 'POST)

Destructive Operations([migration/from-cypress.md] rm -rf)

Persistence([core/when-to-mock.md] LaunchD)

Remote Code Execution([core/security-testing.md] eval()

Secret Exposure([core/auth-flows.md] Token =, [core/auth-flows.md] token=, [core/auth-flows.md] token =)

Sensitive File Access([ci/reporting-and-artifacts.md] .env, [core/authentication.md] .env, [core/error-index.md] .env)

Command Injection([ci/global-setup-teardown.md] child_process, [core/configuration.md] child_process, [core/when-to-mock.md] child_process)

Privilege Escalation([core/error-index.md] setuid)

Security Score0/100

About playwright-skill

The playwright-skill provides developers with a comprehensive set of battle-tested patterns and best practices for using Playwright in automated testing scenarios. It addresses the challenges of writing reliable and maintainable end-to-end (E2E) tests, API tests, component tests, visual regression, accessibility checks, and security validations. By offering structured guidance on test organization, fixtures, page objects, network mocking, authentication, and CI/CD automation, this skill ensures that tests are both resilient and scalable across projects.

The skill includes over 50 reference guides covering the full Playwright feature set, from selectors, assertions, and waiting strategies to browser automation, CLI debugging, and trace analysis. It highlights the latest Playwright capabilities, including screencast recording, browser bindings for agent workflows, ARIA snapshot helpers, and in-place storage state updates. TypeScript and JavaScript examples accompany all guides, ensuring practical implementation advice for developers in these ecosystems. The documentation emphasizes security considerations, such as treating external content as untrusted input and safely pinning dependencies in CI/CD workflows.

Targeted primarily at test engineers, QA specialists, and developers migrating from Cypress or Selenium, the playwright-skill is suitable for teams seeking reliable test automation frameworks. It is particularly useful for projects requiring structured testing strategies, clear isolation between tests, web-first assertions, and robust handling of external services. By following the skill's golden rules and recommended practices, users can reduce flakiness, improve test maintainability, and accelerate debugging and CI/CD integration.

FAQ

What programming languages does the playwright-skill support?

The skill provides examples and guidance for TypeScript and JavaScript.

Can I use this skill to automate third-party websites?

No, the skill is designed for applications you own or have explicit authorization to test. It does not support automating third-party sites without permission.

What Playwright version is required to use this skill effectively?

The guides cover Playwright version 1.59 and later, including features like screencast recording and browser bindings.

Does the skill provide guidance for CI/CD integration?

Yes, it includes best practices for CI/CD workflows, such as pinning dependencies and generating traces on first retry to aid debugging.

Are there recommendations for test organization and isolation?

Yes, the skill emphasizes isolating tests, avoiding shared state, using fixtures instead of globals, and structuring tests with clear behavior per test.

All Files

77 files

ci/SKILL.md2.1 KB