security-auditor

SUSPICIOUS: The skill is internally consistent and does not show credential theft, remote installs, or external exfiltration, but it equips an AI agent with high-risk offensive security-audit and exploit-generation capabilities. Its main concern is disproportionate dual-use power: scanning untrusted code with Bash/Write access and producing actionable PoCs makes it a high-risk security tool rather than malware.