tc-run

SUSPICIOUS: the core purpose is coherent for a QA automation skill, and the login/HITL and no-save rules are protective. However, it operates on an authenticated browser session, captures screenshots, and depends on an orca-graph runtime whose provenance is not established in the provided evidence; combined with unspecified tester-kit data routing, this makes the skill high risk but not confirmed malicious.