jp-validate

SUSPICIOUS: the core testing purpose is coherent, but the skill's footprint is high-impact because it writes and runs real tests against production by default, uses secrets during execution, and may send metadata through MCP services. This looks like a legitimate validation skill with elevated operational risk rather than confirmed malware.