web-security-audit

SUSPICIOUS: the skill is internally consistent and not overtly malicious, but it grants an AI agent offensive security capabilities against external systems. Main risk comes from enabling pentest/scanning behavior and from untrusted target content influencing an agent that may also execute tools or take actions.