security-testing

SUSPICIOUS. The skill’s capabilities are purpose-aligned for security testing, and data flows mostly go to official tools/services rather than unknown intermediaries. However, it grants an AI agent explicit penetration-testing guidance and includes mediocre supply-chain hygiene (unpinned installs, mutable/deprecated action refs), making it a medium-risk security skill rather than benign documentation.