aot-security-audit

SUSPICIOUS: the skill is purpose-aligned and mostly well-scoped, but it enables an AI agent to perform security-audit/pentest-style actions and includes one notable runtime supply-chain risk via unpinned `npx` execution. No clear credential harvesting, covert exfiltration, or deceptive behavior is present.