security-reviewer

SUSPICIOUS due to high-risk offensive security capability, but not malicious. The skill is internally consistent with a security-audit purpose, uses standard local tools, and shows no hidden installs, credential forwarding, or exfiltration; risk comes mainly from enabling an AI agent to perform penetration-testing workflows with Bash.