ai-sensitive-data-disclosure

SUSPICIOUS. The skill is internally consistent as a penetration-testing technique and shows no hidden installer, credential harvesting, or proxy exfiltration. However, it explicitly equips an AI agent to perform offensive security testing against LLM systems, including cross-tenant leakage and history/API abuse, so overall security risk is high despite low evidence of malware.