scanning-for-vulnerabilities

SUSPICIOUS: the stated purpose is coherent with reading code and running scans, but the skill is under-specified about the actual scanner plugin while granting broad Bash execution. No direct exfiltration or credential abuse is visible, yet the missing plugin provenance and wide execution scope make this higher-risk than a normal documentation skill.