developer-qa-reviewer

SUSPICIOUS. The skill’s capabilities mostly fit its stated QA purpose, including secret scanning, browser automation, and artifact inspection. The main concern is install/execution trust: it mandates automatic execution of several external MCP tools using unpinned `latest`, and some referenced MCPs lack provenance evidence here. Data flow stays mostly local to the user’s code/app rather than routing credentials to a third-party gateway, so this is not confirmed malicious; it is a medium-high supply-chain risk QA skill.