gds-test-automate

SUSPICIOUS: the core test-generation purpose is coherent, but the skill goes beyond passive code generation by executing a project-local Python script and then running workflow-defined activation/final steps derived from local config. There is no clear credential theft or explicit exfiltration, but the execution surface and repository-controlled command path make this a medium-risk skill.