implementing-attack-surface-management

SUSPICIOUS. The skill is internally coherent for attack surface management and uses official vendor/service endpoints, so it does not look like credential harvesting or malware. However, it gives an AI agent substantial offensive security and external scanning capability, making it high-risk despite mostly legitimate supply-chain provenance.