detecting-exposed-secrets-files

SUSPICIOUS: the skill is internally consistent and uses normal local Python tooling, but it gives an AI agent active pentest/recon capability against remote targets. No evidence of hidden credential theft, malicious install chain, or third-party exfiltration, yet the offensive scanning scope makes it high security risk.