playwright-scraper-skill

SUSPICIOUS. The core Playwright scraping capability mostly matches the stated purpose, and the primary install path is official enough to avoid a malicious classification. However, the skill is built around anti-bot evasion, includes a transitive third-party skill install, and lacks verifiable detail for the referenced local scripts and dependency pinning, making the overall footprint higher-risk than a normal documentation-only skill.

The code is a browser-based scraping utility, not apparent malware. Its main security concerns are arbitrary URL navigation, which can access internal or local services when the script runs in a trusted network, unrestricted filesystem output paths, and disabling Chromium sandboxing. The anti-detection behavior is explicit and relevant to scraping but does not by itself indicate malicious intent. URL and output-path validation, safer browser sandbox settings, and guaranteed browser cleanup are recommended.