ip-diagnosis

SUSPICIOUS: the overall capability is coherent for an IP/network diagnosis skill, and the external data flows match the stated purpose. The main risk is install trust: it globally installs an ambiguously named Playwright CLI package from npm using a command that does not match current official Playwright documentation, plus it performs broad local inspection and sends network-identifying data to several third-party services without explicit opt-in. This looks more like a risky/over-automated diagnostic skill than a malicious credential harvester.