exploitability-validation

SUSPICIOUS. The skill is internally coherent and not overtly malicious: its capabilities match its stated purpose, scanner prompt-injection hits are documentation artifacts, and there is no clear credential harvesting or off-purpose exfiltration. However, it is a high-risk AI-agent security/exploit tool that instructs autonomous code and binary analysis, PoC generation, and feasibility assessment, using repo-local helper executables from a personal project. Treat as a vulnerable/high-risk offensive-security skill rather than confirmed malware.