cso

SUSPICIOUS. The core audit function is plausible, and the gstack helpers appear same-project rather than an unrelated payload, so this is not confirmed malware. But the skill is internally inconsistent: it claims read-only security auditing while also modifying repos, committing changes, invoking other skills, and relying on local executable helpers installed via an unpinned setup flow. Medium-to-high security risk from scope creep and transitive trust, not from clear credential theft.