auditing-cors-policy

SUSPICIOUS: the skill is internally coherent and does not show malware-like exfiltration or supply-chain abuse, but it gives an AI agent active penetration-testing capability against remote targets. Because it is a security/exploit-oriented scanning skill with network probing powers, overall risk is high despite otherwise proportionate scope and clean data flow.