hasura-tests

SUSPICIOUS. The skill’s testing workflow, permissions model, and localhost data flows are largely coherent and benign, but the CI installation step introduces a notable supply-chain inconsistency: a third-party npm wrapper for Hasura CLI that auto-downloads and executes binaries. That install path is riskier than the rest of the skill and pushes the overall classification above benign.