reverse-engineer

SUSPICIOUS: the skill is mostly coherent with its stated reverse-engineering purpose and avoids direct credential harvesting or payload execution, but it combines untrusted external-content processing with write capability and encourages community-skill chaining. Main risk is prompt-injection and broader offensive-analysis enablement, not confirmed malware.