agent-native-audit

SUSPICIOUS: the skill’s stated purpose matches its auditing behavior, and it does not directly request credentials or exfiltrate data. The main risk is transitive trust: it requires loading another skill from an unverified namespace, with only medium-confidence provenance for the referenced external skill distribution.