r2http

SUSPICIOUS: the skill is internally coherent and uses official tooling, but it gives an AI agent direct stateful control over radare2's command-execution HTTP interface, including weaker sandbox settings and optional remote exposure. The main risk is powerful offensive/RE capability and runtime control surface, not malware or credential theft.