security-verify

SUSPICIOUS: the skill is internally consistent for a security-audit purpose, but it equips the agent with offensive security scanning and live DAST capabilities, which are inherently high impact. Install/data-flow evidence is mostly standard and not overtly malicious, but the combination of Bash execution, local scripts, and active security testing makes this a high-risk security skill rather than a benign helper.