qt-devtools-setup

SUSPICIOUS. The skill’s capabilities broadly match its stated purpose of setting up Qt UI-testing infrastructure, and there is no clear credential harvesting or off-purpose data exfiltration. The main concern is install trust: it asks the agent to install and run a young, unpinned third-party PyPI CLI with weakly verifiable upstream provenance, then use it to provision and control a VM. That is a supply-chain risk rather than confirmed malware.