security-sast-dast

SUSPICIOUS: the skill is internally coherent and uses mostly official tools, but it grants an AI agent meaningful security-testing capability and supports authenticated DAST against live targets. This is not malware, yet it is high-risk due to offensive scanning functionality and credential use within external scanner workflows.