security-research

SUSPICIOUS. The skill is internally consistent as a security-audit skill, and install/data-flow trust looks same-org with no external downloader in the skill itself. However, it explicitly equips the agent to perform vulnerability hunting and exploitability testing, which is a high-risk offensive capability for an AI agent even when framed as review; this warrants elevated security risk but not a malware classification.