security-audit

SUSPICIOUS. The bundle is internally consistent as an offensive security workflow, but it is high risk because it explicitly enables AI-driven penetration testing and delegates to many unpinned downstream skills whose behavior and provenance are not established here. No direct credential theft or exfiltration is evident in this file alone, but the transitive trust chain and offensive scope make it unsafe to treat as benign.