playwriter

SUSPICIOUS. The skill's capabilities generally match its browser-automation purpose and the tooling appears to come from the same project, so this is not confirmed malware. However, it asks the agent to trust an external CLI for the real instructions, uses mutable `@latest` execution paths, and grants powerful control over the user's existing logged-in Chrome session, making it medium risk.