icp-deep-scanner

SUSPICIOUS. The skill’s purpose is coherent and its guardrails are reasonable, but it has a broad sensitive-data footprint and combines untrusted content ingestion with Write/Bash/Agent capabilities. There is no clear malware behavior or credential harvesting path in the skill text, yet the transitive skill trust and prompt-injection exposure make it medium risk rather than benign.