audit

SUSPICIOUS. The skill’s purpose is coherent for a local audit workflow and it does not explicitly request secrets or exfiltrate data, but it materially depends on a `doctrine` CLI/MCP toolchain whose provenance could not be verified from the provided evidence. That unverifiable execution dependency makes the skill high-risk from a supply-chain standpoint even though the skill text itself is not overtly malicious.