fp-check

SUSPICIOUS. The skill is internally coherent and shows no credential theft, exfiltration, or supply-chain abuse, but it grants an AI agent substantive security verification and exploitability-analysis capability with shell access. That makes it high-risk as an offensive/security-analysis skill, though not malicious based on the provided content.