security-review

SUSPICIOUS: The skill is mostly coherent with its stated purpose and shows no credential theft, remote installer, or exfiltration path in the supplied text. However, it grants an AI agent offensive security-review capability and executes an unreviewed bundled script, so the overall risk is medium despite low evidence of malicious intent.