quality-assurance-agent

SUSPICIOUS: 该 skill 的总体能力与“QA 编排器”目的基本一致，未见明显凭据窃取、隐藏外传或恶意预执行语法，因此不像恶意 skill。主要风险在于它是高权限编排器，会自动调用未提供内容的多个子 skills、本地 CLI 和安装步骤，形成较强的传递信任链；在缺少 qa_agent.py、子 skill 内容及安装源细节时，执行与供应链风险不能视为低。

The fragment appears to be a legitimate QA automation and repository-orchestration tool, not an obvious malware implant. No obfuscation, hardcoded secrets, exfiltration domain, reverse shell, persistence, destructive behavior, or cryptomining is evident. Security review is warranted because it transmits repository-derived data to a configurable LLM endpoint, writes MySQL passwords into MCP configuration files, downloads and executes unpinned npm packages via npx -y, and executes configuration-controlled shell commands. Use only with trusted repositories, protect generated configuration files, avoid committing .mcp.json or Codex credentials, pin and verify external packages, and restrict LLM endpoints and network access.