security-auditor

SUSPICIOUS: The core audit/guard/trust behavior is broadly consistent with a security meta-skill, and most flagged destructive patterns are harmless documentation examples. The main security issue is the explicit transitive installation path to a personal GitHub skill repo via the official skills CLI, which expands trust beyond the stated local-analysis purpose and warrants elevated risk despite no direct malware evidence.