dev-security-audit

BENIGN for stated purpose but high-impact. The skill is internally consistent with a workstation compromise audit and shows no suspicious installer or obvious credential exfiltration path, yet it grants an agent broad access to secrets, wallets, browser/app data, and persistence state. Treat as a legitimate but high-risk security triage skill that should only run with strong user intent and tight execution controls.