run-tests

SUSPICIOUS. The skill's core local testing behavior is coherent, but it mandates sending failure details and sometimes source code to third-party AI tools, creating a nontrivial external data-sharing risk. The undocumented provenance of the `sdd` CLI further increases trust uncertainty, though there is no clear evidence of malware or credential theft.