auditing-azure-active-directory-configuration

SUSPICIOUS. The skill is internally coherent for Azure identity security auditing and mainly uses official Microsoft APIs and tooling, but it enables high-impact security reconnaissance and forwards tenant access context to a third-party auditing tool (ScoutSuite). No direct exfiltration, deceptive routing, or obviously malicious installer behavior is present.