senior-security

SUSPICIOUS. The skill is internally consistent for a security/pentest role and shows no direct credential theft or exfiltration path, but it enables offensive security activity and execution of unseen local scripts plus install/deploy commands. This is not confirmed malware, yet it carries meaningful operational risk for an AI agent.