exploitability-validation

SUSPICIOUS. The skill is coherent with its stated purpose, but that purpose is to give an AI agent offensive exploit-validation capability with local code execution and PoC workflows. Data flow is mostly local and there is no clear credential theft, so this is not confirmed malware, but it remains a high-risk security skill.