sprint-testing

SUSPICIOUS. The skill’s core capabilities fit its stated QA purpose, and most data flows target expected project systems. However, it handles credentials/tokens, performs authenticated network calls, and depends on external CLIs including an insufficiently verified `xray-cli`; that combination makes the install/execution trust and credential-forwarding footprint higher-risk than a typical documentation-only skill.