implementing-runtime-application-self-protection

SUSPICIOUS. The core capability fits the stated RASP purpose, and the named OpenRASP project has plausible official provenance, so this does not look fundamentally incompatible or overtly malicious. However, the skill asks the agent to install and run external instrumentation inside application runtimes without pinned artifacts or verification details, so the install trust and execution footprint are broader than the instructions justify.