scoutsuite

SUSPICIOUS: The skill is internally coherent for a cloud security auditing tool and uses official auth flows plus a same-project PyPI package, so it does not look malicious. However, it gives an AI agent high-impact security auditing capability across real cloud environments, which is inherently high risk despite otherwise benign provenance.