ask-parallel-auditor

SUSPICIOUS: the stated purpose is coherent for large-scale audits, but the skill's main function is transitive delegation to parallel subagents and other third-party skills, expanding autonomy and trust boundaries. No direct credential theft, exfiltration endpoint, or malicious payload is shown here, but the transitive skill-install/execution pattern and background worker orchestration make it a medium-high security risk.