bug-hunter-security

SUSPICIOUS: The skill’s purpose broadly matches its capabilities, but it grants a security-auditing agent authority to inspect untrusted code and potentially execute ad-hoc tests without scoping, safety guardrails, or provenance details. There is no evidence of credential harvesting or exfiltration, but the combination of security-audit behavior and possible execution makes it medium risk.