baseline-security-audit

SUSPICIOUS. The stated purpose is plausible, but the skill's actual footprint is a remote, unpinned instruction loader from a mutable GitHub path. That creates a transitive trust chain and prevents meaningful review of the real behavior, making the skill high risk even without confirmed malicious payloads.