acidrain-security-testing

SUSPICIOUS. The offensive testing purpose broadly matches the examples, but the skill installs from an unrelated personal GitHub repo rather than a verifiable ara.so source, and it equips the agent with high-risk offensive security capabilities plus cookie/session theft patterns. This looks more like a high-risk security-testing skill from an unverified publisher than confirmed malware.