computer-use-test

SUSPICIOUS: the stated QA purpose is coherent, but the skill’s real trust boundary is underspecified because all sensitive UI interaction and screenshots pass through an unnamed Computer Use MCP backend. The broad Bash permission is also wider than necessary. No clear credential theft or overtly malicious behavior is present, but the unspecified third-party MCP dependency and possible UI data exposure make this medium risk.