qe-security-compliance

SUSPICIOUS: the skill is internally consistent with a security-audit purpose, but it grants an AI agent high-impact security scanning capabilities and access to sensitive files like `.env*` and private keys. No clear exfiltration or malicious routing is shown, so this is not malware, but it is a high-risk security skill with moderate supply-chain uncertainty around the `aqe` toolchain.