extract-secrets

SUSPICIOUS: the skill’s purpose and capabilities mostly align, and there is no inline malware pattern or installer abuse. The main risks are broad MCP wildcard permissions, reliance on external Crawlio infrastructure for sensitive scan data, and offensive-security functionality that should only be used on authorized targets.