p-edge-browser

SUSPICIOUS. The skill is broadly coherent as a browser-escalation helper and mostly uses official Playwright/Edge mechanisms, but it grants the agent high-impact access to the user's real authenticated browser, includes unsafe code execution hooks, and explicitly instructs anti-bot challenge handling. The optional third-party `windows-mcp` path and use of live login state make the scope sensitive and medium-high risk even without confirmed malware.

未提供可执行代码，因此无法确认恶意行为。文档描述的设计具有高权限浏览器接管能力，并使用未固定版本的 npx @playwright/mcp@latest，存在明显的凭证暴露、第三方中继和 npm 供应链风险。应审查仓库中实际脚本、锁定依赖版本、限制浏览器 profile 权限并保护扩展 token。