sc-audit

SUSPICIOUS: the skill is internally consistent for smart-contract auditing and uses mostly official endpoints, but it grants an AI agent high-risk offensive security capabilities, executes untrusted project code/toolchains, and can autonomously select external targets. This is not confirmed malware or credential theft, yet it is a high-risk agent skill that should be tightly sandboxed and operator-controlled.