frontend-e2e

SUSPICIOUS: the stated purpose is coherent for browser QA, but the skill expands trust via a repo-local script that installs other skills, and that transitive chain is not auditable from the excerpt. No direct malicious behavior or credential theft is shown, yet the unverifiable installer path and skill-to-skill loading make this medium-high risk.