assisting-with-soc2-audit-preparation

SUSPICIOUS: the stated purpose is plausible, but the skill outsources sensitive evidence collection to an insufficiently described plugin with broad execution capability and unclear canonical distribution. There is no direct proof of malware or credential theft, yet the install trust and opaque data handling are too weak to treat as benign.