atb-testframework-build

SUSPICIOUS. The skill’s capabilities mostly match its stated build purpose, and it does not request disproportionate credentials or exfiltrate data. However, it modifies build scripts to replace official upstream sources with third-party GitCode mirrors, relies on executing a repo-local build script that fetches code, and includes a no-certificate-check download pattern. These are medium supply-chain risks rather than confirmed malware.