ai-runtime-security-sandbox

BENIGN with moderate security risk. The skill’s capabilities match its stated goal of demonstrating RAG/agent attacks, and there is no clear credential harvesting or covert exfiltration in the instructions. Main concerns are publisher/repo mismatch, mutable GitHub-source installation, and optional routing of prompts/API keys to arbitrary custom model endpoints if the user enables them.