claude-verifier

SUSPICIOUS: the core purpose is plausible, but the skill includes a system-prompt extraction test and encourages sending API keys to arbitrary user-specified endpoints, which are disproportionate to simple authenticity checking. The Playwright MCP install appears official rather than malicious, but it broadens execution scope and uses unpinned @latest packages.