web3-audit

SUSPICIOUS: the skill is coherent with its stated purpose, but that purpose is to give an AI agent offensive smart-contract auditing and exploit-PoC capability. Dependency provenance is mostly consistent and data flows are direct to the configured RPC provider, yet the combination of exploit tooling plus credentialed RPC use makes it high security risk even without clear malware behavior.