auth-flow-operator

SUSPICIOUS. The skill is internally coherent for authentication and authorization security testing, but it equips an AI agent to perform active security testing and real-world account/session actions on target systems. There is no strong evidence of malware or credential exfiltration, yet the offensive testing scope and third-party skill-installation chain make it a medium-to-high security risk rather than benign.