Playwright
playwrightAn agent with playwright on its PATH can act on websites as you. Memnox wraps the binary, reads the command before it runs, and matches it against the table below. Nothing here is a list of what we support: it is what the runtime already classifies, and the strings are the ones a rule matches on.
What it changes
Allowed by default, and the obvious first thing to put behind ask.
playwright test **playwright.test- drives a browser
playwright **playwright.run- drives a browser
The rule this writes
[[rules]] name = "playwright-destructive-asks-first" match.actions = ["playwright.**"] decision.effect = "ask" decision.reason = "This cannot be undone."
memnox protect --for playwright writes this into memnox.policies.toml from the table above. You can edit it, and the file is yours.
Run npx memnox to find out whether Playwright is actually reachable from your machine. It reads your own disk and needs no account.