running-integration-tests

SUSPICIOUS. The stated behavior fits an integration-testing skill, and the visible instructions do not show credential theft or exfiltration. However, the distribution evidence is not official: third-party mirrors, raw GitHub delivery, and transitive skill-install commands create moderate supply-chain and trust-chain risk. Treat as medium-risk vulnerable content rather than confirmed malware.