dev-loop-security-auditor

SUSPICIOUS: the skill is internally consistent as a security-auditing guide, but it grants an AI agent active offensive-security workflows including penetration-testing and DAST against user-specified targets. There is no clear malware or exfiltration behavior, yet the capability set is high-risk by design and should be treated as a vulnerable/offensive skill rather than a benign documentation-only helper.