yara-sigs

This skill is purpose-aligned and mostly locally scoped, with no obvious credential harvesting or external exfiltration. The main risks are that it is an AI-agent offensive/security-analysis capability, uses unpinned git-cloned rule sets with recursive submodules, and chains into another skill for snapshot collection.