playwriter

SUSPICIOUS: The skill's purpose and capabilities mostly align, but it combines unpinned third-party code execution (`npx ...@latest`) with access to the user's live authenticated browser session. No clear malicious exfiltration or deceptive routing is shown, but the install trust and real-world action surface make it medium risk.