harden

SUSPICIOUS. The skill is mostly coherent for a hardening/red-team assistant and does not install software, request credentials, or route data to suspicious endpoints. However, it grants an AI agent offensive security review behavior and autonomous code-modification workflow, and it mixes external research with write actions. Risk is driven by agent capability scope rather than malware indicators.