qa-only

SUSPICIOUS: the core browser QA purpose is legitimate, but the actual footprint is much broader than a report-only testing skill. Same-org tooling lowers malware likelihood, yet the skill performs extensive shell execution, optional remote telemetry/artifact sync, local config mutation, and even repo commits, which are disproportionate to simple QA reporting.