microsoft/playwright-mcp

Powerful capabilities — review before trusting.

Environment variables (config / keys) 3

Shell / command execution 4

AI review

This is a legitimate Microsoft Playwright MCP server extension with no deceptive or malicious intent. The static findings reference standard development tooling (child_process for build scripts, env access for CI configuration) that are expected in a well-maintained open-source project. The release instructions and contributing guidelines are transparent about the project's purpose and development workflow.

low No prompt injection or hidden instructions detected — All instructions in CLAUDE.md and release.md are standard development workflow documentation for maintaining the Playwright MCP package. No attempts to manipulate the agent or exfiltrate data were found.
low Standard development tooling usage — The use of child_process.execSync in roll.js and update-readme.js is expected for build/release automation scripts. The env_access patterns (process.env.CI, process.env.PRINT_ENV) are standard CI/CD configuration checks, not credential exfiltration attempts.
low No deceptive tool descriptions — The README and contributing documentation accurately describe the project as a Playwright-based MCP server for browser automation. All tool purposes are clearly stated and match the extension's stated functionality.

Model: deepseek-chat

Static findings

Environment variables (config / keys) · Reads environment variables (config / API keys)

low playwright.config.ts:24 forbidOnly: !!process.env.CI,

info tests/fixtures.ts:83 if (process.env.CI && process.platform === 'linux')

low update-readme.js:186 if (process.env.PRINT_ENV) {

Shell / command execution · Executes shell / system commands

medium roll.js:3 const { execSync } = require('child_process');

info tests/cli.spec.ts:16 import child_process from 'child_process';

info tests/library.spec.ts:16 import child_process from 'child_process';

medium update-readme.js:21 const { execSync } = require('child_process');

Scanning every extension your team installs?

Pro & Team add monitoring, private scans, and a CI gate for unsafe extensions.

MCPVet is a heuristic aid, not a security guarantee. A clean grade does not prove an extension is safe; always review code and instructions you don't trust.