app-security-gate

SUSPICIOUS. The core behavior is coherent with a security-gate skill, and there is no direct exfiltration, credential forwarding, or hidden execution in the provided text. However, it grants an AI agent offensive security-testing capabilities and instructs loading additional skills, including at least one companion whose official provenance is unclear, so overall risk is medium even though malicious intent is not evident.