agent-eval

SUSPICIOUS: The skill’s capabilities mostly match its stated purpose, but the install path relies on a low-maturity personal GitHub repo instead of a registry, and the tool executes task-defined commands that can affect the local system. This looks like a coherent benchmarking skill with meaningful supply-chain and execution risk rather than confirmed malicious behavior.