quality-integration-test

SUSPICIOUS. The skill's purpose is coherent for local integration testing, and it does not show credential harvesting or off-box exfiltration. The main risks are autonomous multi-step Bash-enabled execution, moderate prompt-injection exposure from repository content, and unsafely interpolated argument-derived paths in a shell command. Overall this is a high-privilege testing orchestrator with meaningful operational risk, but not confirmed malware.