Model Context Protocol servers for Playwright
62%
Total Score
50
50
95
63
50
The repository recorded zero commits and zero active maintainers in the last three months, which is a direct warning of stalled recent maintenance despite its release history.
No build attestation or trusted-publisher provenance is present, so consumers cannot verify how this release was produced.
Ten runtime dependencies, including multiple browser engines and Playwright components, create a relatively broad dependency surface for a server package.
A prepare install-time script adds execution during installation, creating some dependency-installation complexity, though this signal alone is not severe.
Only one registry account has publish access, which creates publishing continuity risk. The matching repository owner provides some context but does not remove the single-publisher concern.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10945 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @executeautomation/playwright-mcp-server is vulnerable to Improper Access Control in versions 0.1.0 - 1.0.6. | 0.1.0 - 1.0.6 | High |
| Dependency | Last Release | Score |
|---|---|---|
cors Version ^2.8.5 | — | — |
uuid Version 11.1.0 | — | — |
express Version ^4.21.1 | — | — |
mcp-evals Version ^2.0.1 | — | — |
playwright Version 1.57.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.