unit-test

SUSPICIOUS: The core testing behavior is broadly aligned with the stated purpose, and the referenced tooling is mostly official. However, the skill is unusually powerful for a test helper: it runs autonomously, can modify application code, may install dependencies, scans the whole project, writes to a user memory directory, and encourages chaining into other skills. No clear credential theft or external exfiltration is present, so this is not malicious, but it is a high-impact local automation skill with meaningful security risk.