security-group-generator

SUSPICIOUS: the skill is not overtly malicious and shows no exfiltration, hidden execution, or rogue endpoints, but its scope is only loosely aligned to its stated purpose. The main concern is that a vaguely documented third-party skill can invoke broad `aws:*` commands, enabling real infrastructure changes beyond simple security-group generation.