octopus-security-audit

SUSPICIOUS/HIGH-RISK but not confirmed malware. The skill is internally consistent as a security-audit skill and the referenced orchestrator appears same-publisher, but it gives an AI agent offensive security and exploit-testing abilities, plus broad local inspection of git history and Claude skill/plugin files. Main concern is agent-enabled red-team capability, not stealth or obvious credential exfiltration.