qa-agent-claude

SUSPICIOUS: The skill is broadly aligned with QA automation and uses official Playwright tooling, so there is no strong malware or credential-harvesting signal. However, its autonomous closed-loop behavior, ability to drive real applications, mutate repo files, and process untrusted app content make it a medium-risk skill that exceeds a simple documentation/reference role.