pwcheck

SUSPICIOUS. The skill’s stated purpose matches its browser-automation behavior, and its Playwright dependency path is broadly legitimate. The main issue is trust: the core script is absent from the skill and must be copied from an unspecified host, then run with user-provided login credentials. That unverifiable script origin makes the skill higher risk than a normal documentation-only testing helper, though there is no clear evidence of credential exfiltration or overtly malicious behavior in the provided material.