freeman-browser

This skill implements a stealth Playwright wrapper and mostly matches its description, but there are red flags you should consider before installing: - SKILL metadata claims no credentials are required, yet the code and docs use environment variables (e.g., TWOCAPTCHA_KEY, BROWSER_CONFIG). Ask the author to declare required env vars and document why they are needed. - The SKILL.md contains an apparent hard-coded 2captcha API key — treat any embedded API key as a serious red flag. Confirm whether that key is valid, who owns it, and remove hard-coded secrets. If that key works, using the skill will route captcha solving (and page URLs) through the key owner's 2captcha account. - The skill explicitly instructs bypassing anti-bot protections and solving CAPTCHAs. That may be ethically or legally problematic depending on your use case and the site’s terms of service. Do not use this to access accounts or scrape services you don't own or have permission to access. - Because the script attempts to resolve Playwright from multiple local paths, it will read files in your workspace; run it in an isolated environment or sandbox if you want to limit exposure. If you still want to proceed: request provenance (a public repository and author identity), ask the author to remove hard-coded secrets and add a clear list of required environment variables, and run the code in an isolated container or VM. If you cannot verify the origin or the 2captcha key, do not install into a production agent.