security-test-generator

SUSPICIOUS. The skill is internally consistent and does not show credential theft, hidden exfiltration, or untrusted binary installation, but it gives an AI agent offensive security-test generation capabilities that can produce runnable exploit probes. Overall risk is driven by the nature of the capability and minor supply-chain hygiene issues, not by malware-like behavior.