security-audit

SUSPICIOUS. The skill is purpose-aligned and shows no credential theft, exfiltration, or installer abuse, but it explicitly equips an AI agent for security assessment activities, which is a high-risk capability category. Because it is an offensive-security skill without clear target/approval constraints, it should not be treated as benign even though the content itself appears non-malicious.