acidrain-security-script-hub

SUSPICIOUS. The skill’s offensive security purpose is explicit and the example capabilities fit that purpose, but the install trust is weak because the claimed ara.so publisher does not match the actual GitHub source owner. No direct credential exfiltration or covert data routing is evident in the provided content, yet the combination of unverified provenance and AI-enabled security testing makes this a high overall security risk.