security-reviewer

SUSPICIOUS: the skill is internally coherent for a security-audit specialist, but it deliberately equips an AI agent with offensive security and active testing capabilities. No clear credential exfiltration, hidden behavior, or malicious installer is present, so this is not confirmed malware; the main concern is high operational risk from AI-enabled pentesting with Bash and external scanners.