cloud-saas-exposure

SUSPICIOUS. The skill is internally coherent and uses official endpoints, but its actual purpose is to give an AI agent offensive reconnaissance capability against cloud, package-registry, and Kubernetes-related attack surface. There is no clear credential-harvesting or malware behavior, yet the exploit/recon scope is high-risk for an agent skill; sample TLS-bypass flags in docs add minor concern.