qa-engineer

SUSPICIOUS. The core QA/testing behavior is mostly coherent and official installs for Playwright/Midscene are plausible, but the skill expands trust by installing another skill, enables broad autonomous actions, and can send UI content to third-party model endpoints for vision testing. Main concern is transitive skill installation and external data flow, not confirmed malware.