qa-engineer-agent

SUSPICIOUS: The skill’s stated QA purpose mostly matches its behavior, and it has no obvious credential harvesting, exfiltration endpoint, or supply-chain installer risk. The main concern is scope: it grants broad execution and web capabilities and includes security-testing behavior, which is high-risk for an AI agent unless tightly supervised.