eval-driven-dev

SUSPICIOUS: the skill’s overall purpose is coherent for LLM QA, but it carries meaningful security risk from autonomous shell-driven setup, unpinned self-update behavior, background server startup, and broad code/command access. Data flows largely match the stated purpose and there is no clear credential-harvesting or unrelated exfiltration, so this is not confirmed malicious.