Dolphin Anty

• Verdict: Pass
• Confidence: High
• Analyzed: Feb 16, 2026, 7:27 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, instructions, and required inputs are consistent with its stated purpose (automation of Dolphin Anty profiles via local/cloud APIs and Playwright).

This skill appears to be what it says: a Dolphin Anty automation helper that uses the local Dolphin app and Playwright. Before installing or running it, consider: (1) it requires you to generate and provide your Dolphin Anty API token — the scripts store that token in plaintext at .token (inspect/relocate/encrypt if you prefer); (2) the 'custom' task executes arbitrary JavaScript inside pages and prints/saves results — that can exfiltrate page contents if misused, so run only with sites and pages you trust; (3) the tool is designed to automate account registration and anti-detection browsing — those use-cases can be abusive depending on your intent and the target sites; (4) ensure Dolphin Anty desktop is legitimate and you trust the author before giving a real token; (5) run in an isolated environment (container/VM) if you want to limit blast radius, and revoke the token via the Dolphin Anty panel if you suspect compromise. If you want stronger guarantees, ask the author for code signing, or review/modify the scripts (e.g., secure token storage, limit or remove the custom-JS feature) before use.