playwright

SUSPICIOUS. The browser-automation purpose is coherent, and the npm Playwright install path is broadly legitimate, but the skill’s actual core is an unverified local server script that is executed and entrusted with login data, page contents, screenshots, and JS evaluation. Localhost routing lowers direct exfiltration concern, yet the hidden server implementation makes the overall footprint disproportionate to a transparent documentation-only skill.