ql-execute

SUSPICIOUS: The skill’s purpose and capabilities are mostly aligned for an autonomous coding pipeline, and there is no evidence here of credential theft, external exfiltration, or untrusted remote installers. The main risk is scope: it grants an agent broad autonomous code execution, review, and commit behavior based on local repo instructions and dependencies not shown here, which is proportionally risky even if not overtly malicious.