tm-security-review

SUSPICIOUS/HIGH-RISK but not malware. The skill is internally consistent with its stated purpose and shows no evident credential theft, remote installer abuse, or exfiltration. However, its purpose is to equip the agent with offensive security-review behavior, including exploit validation and runnable PoCs, which is inherently high risk for an AI agent even when framed as a legitimate audit workflow.