js-reverse-mcp-debugging

SUSPICIOUS. The core debugging capabilities align with the stated purpose, and the main npm install path is coherent. Risk comes from the optional anti-detection stack: the skill encourages use of a separate third-party browser binary that auto-downloads and executes, plus it exposes rich browser/session data and execution primitives against untrusted web content. This looks like a legitimate but high-risk reverse-engineering skill, not confirmed malware.