security-reviewer

SUSPICIOUS: the skill is coherent with its stated security-audit purpose and shows no clear credential theft or malicious exfiltration, but it grants an AI agent offensive security capability including penetration testing and active scanning via Bash. Supply-chain risk is modest because the named tools are legitimate, yet the overall skill remains high-risk due to exploit-oriented use.