sdk-docs-auditor

SUSPICIOUS: the skill’s purpose is coherent, but it combines arbitrary web-content ingestion with bash-based fetching and unquoted user-influenced shell commands. There is no clear credential theft or malware behavior, yet the shell-injection and indirect prompt-injection exposure make it a medium-risk agent skill.