security-auditor

SUSPICIOUS: The skill is internally consistent as a security-auditor guide and shows no installers, credential harvesting, third-party routing, or hidden execution. However, it gives an AI agent offensive security-testing capabilities, which creates meaningful security risk despite the stated authorization cautions.