workflow-security-audit

SUSPICIOUS: the skill is mostly an orchestration wrapper, but it forces execution of multiple nested skills whose behavior is not defined here. There is no clear credential theft or exfiltration path, yet the transitive trust chain and security-audit action surface make the skill medium risk and not fully self-contained.