qa-only

SUSPICIOUS: the browser-testing purpose is legitimate and the install sources appear same-org and largely verifiable, so this is not confirmed malware. However, the skill’s actual footprint is broader than 'report-only QA': it executes many local helper binaries, writes persistent analytics/config, may sync artifacts or telemetry, and can alter project metadata and git state. Risk is driven more by overbroad operational scope and trusted local executables than by malicious exfiltration evidence.