deobfuscating-powershell-obfuscated-malware

SUSPICIOUS. The skill’s core behavior fits its stated malware-analysis purpose, but that purpose itself grants an AI agent offensive/security tooling and local execution of transformed malware samples. Install trust is mixed: PSGallery is legitimate but the cited PSDecode package appears purpose-mismatched, and other referenced tools come from personal GitHub repos without strong release-verification signals. No direct credential harvesting or third-party exfiltration is shown, and the scanner’s backtick findings are documentation false positives rather than pre-execution malware.