qe-security-testing

SUSPICIOUS: The skill is internally consistent as a security-testing guide, and the flagged command/secret findings are documentation artifacts. Risk comes mainly from giving an AI agent offensive security-testing capability plus some mutable CI supply-chain references and transitive skill coordination, not from clear credential theft or malicious data exfiltration.