tdd-execute-acpx

SUSPICIOUS: the skill’s coding/TDD purpose matches its core behavior, but its footprint includes external routing of repository content to `acpx`/Codex, broad `--approve-all` execution, and a transitive reviewer skill. This is not confirmed malware, yet it carries meaningful supply-chain and data-export risk beyond a purely local TDD helper.