qa-workflow

SUSPICIOUS. The skill’s QA purpose broadly matches testing/review behavior, but it is overpowered as an orchestration layer: it delegates to several unverifiable custom skills/MCP services and instructs the agent to take autonomous repository and messaging actions, including merge/push. The main concern is transitive trust and autonomous impact, not confirmed malware or credential harvesting.