qa-team

SUSPICIOUS. The skill’s testing purpose broadly matches command execution and evidence collection, but its footprint is wider than a simple QA helper: it installs a not-clearly-linked external framework, supports remote SSH and shadow workflows, collects rich artifacts, and instructs the agent to load another skill. The main concern is trust and scope expansion rather than confirmed malicious behavior.