sparkfinderoven-security-compliance-suite

The skill is not confirmed malware, but it is higher-risk than a normal documentation skill. Its stated purpose matches most capabilities, yet it grants an AI agent security-scanning and pentest-adjacent workflows, references external executables that are not included for review, and uses a somewhat inconsistent publisher/source relationship. Overall classification: suspicious/high-vulnerability rather than benign or confirmed malicious.