automation-coverage

SUSPICIOUS: The skill's core behavior is mostly aligned with its stated purpose, and the referenced Testomat.io packages appear legitimate same-ecosystem tools. However, it expands trust by delegating to another skill, executing unpinned npm packages, and optionally cloning arbitrary external repos for analysis, which makes the overall footprint moderately risky rather than fully benign.