chaos

SUSPICIOUS: mostly purpose-aligned for a chaos-engineering skill, with no obvious credential harvesting, third-party proxying, or malicious installer flow. Risk comes from autonomous broad codebase inspection, code/test generation plus execution, and optional hidden telemetry writes under ~/.claude/projects; these behaviors are somewhat beyond a pure analysis skill and create medium operational risk, but they are still plausibly related to the stated QA purpose.