agency-evidence-collector

SUSPICIOUS. The stated purpose is coherent with local QA testing, screenshot capture, and file inspection, and there is no explicit credential harvesting or exfiltration path. However, the skill's core action is executing an undocumented local script with unknown provenance and undeclared behavior, which creates a material trust gap disproportionate to the otherwise simple QA instructions.