continuous-exposure-monitoring

SUSPICIOUS. The skill is largely a documentation-style guide and not a credential stealer, but it meaningfully expands an agent into autonomous security monitoring against external targets, forwards results to arbitrary webhooks, processes adversary-controlled content, and its 'passive only' claim is inconsistent with the included active and validation-capable scan paths. Malware intent is not established, but operational security risk is high.