audit-website

SUSPICIOUS. The core website-audit purpose broadly matches the claimed capabilities, but the skill combines unpinned remote installer execution, autonomous code/content modification, target inference from local context, and untrusted web-content processing. This looks more like a powerful audit-and-remediation workflow than simple reporting, raising medium-to-high security risk even without clear evidence of credential theft or overt malware.