jest-test-generator

SUSPICIOUS. The skill's stated purpose is benign, but its actual footprint is underspecified and overpowered because it grants unrestricted Bash access for a generic Jest helper without documenting limits, installs, or exact workflows. There is no evidence of credential theft, exfiltration, or malicious payloads, so this is better classified as broad/underspecified local automation risk rather than malware.