security-audit

SUSPICIOUS: the bundle is purpose-aligned as a security-audit workflow, but it enables offensive security operations through an AI agent and depends on many unverified downstream skills. The main risks are transitive trust and agentic pentesting capability, not confirmed credential theft or malware in this file itself.