auto-triage

SUSPICIOUS: the skill is internally consistent and does not show credential theft, stealth, or suspicious install behavior, but it gives an AI agent offensive security workflow capability by turning verified findings into executable human PoCs and optionally re-running them on targets. Risk comes from exploit enablement and real-world action scope, not from malware-like behavior.