cloud-saas-exposure

SUSPICIOUS/High-risk but not malware. The skill is internally consistent with its stated purpose as an authorized cloud-exposure recon guide, uses mostly official endpoints, and avoids credential submission or remote installer chains. The main concern is that it gives an AI agent offensive discovery capabilities against cloud, supply-chain, and K8s/CI surfaces; combined with insecure example flags like curl -sk, this makes it a high-security-risk skill despite no clear evidence of credential theft or hidden exfiltration.