code-recon

SUSPICIOUS: the skill is internally coherent and shows no exfiltration or supply-chain abuse, but it equips an AI agent with explicit security-audit/recon capability and references undocumented helper scripts. Treat as high-risk dual-use security tooling rather than malware.