qa

SUSPICIOUS. The core browser-QA, bug-fixing, screenshot capture, and atomic commits are coherent with the stated purpose, and the helper tooling appears to come from the same gstack publisher. However, the skill has a large operational footprint: extensive shell execution, repo mutations, CLAUDE.md injection, local helper binaries, eval/source of binary output, and optional telemetry/artifact sync. This looks like an aggressive but plausibly legitimate workflow skill rather than confirmed malware; risk comes from breadth and trust in the gstack toolchain, not clear credential theft or covert exfiltration.